GCC Low Tenant Compliance Requirements

Question

Hello,

What are all of the compliance standards a third-party service provider such as Admin by Request or Patch My PC need to meet when integrated with a GCC Low Tenant? For example, ISO27001, SOC 2, etc.

Thanks,

Ronny

Answer 1

@Ronny Dorian, Thanks for posting in Q&A. I don't know the specific compliance requirements for Admin by Request or Patch My PC when integrated with a GCC Low Tenant, but there are general compliance standards that third-party service providers need to meet when working with GCC environments. These compliance standards include, but are not limited to:

1. International Organization for Standardization (ISO) 27001 and 27018
2. Service Organization Controls (SOC) 2
3. National Institute of Standards and Technology (NIST) Special Publication 800-53
4. Federal Risk and Authorization Management Program (FedRAMP) Authorization

It's important to note that compliance requirements can vary based on the specific industry and location of the organization. Also, compliance is a shared responsibility between Microsoft, the third-party service provider, and the tenant. The tenant should also ensure that the third-party service provider they choose meets their specific compliance requirements.

If you need more detailed information about the specific compliance requirements for Admin by Request or Patch My PC when integrated with a GCC Low Tenant, you can open case or consult the compliance documentation provided by the respective products.

References:

• ISO/IEC 27001:2013 Information Security Management Standards, https://learn.microsoft.com/en-us/compliance/regulatory/offering-iso-27001#office-365-and-iso-27001
• Architectural approaches for governance and compliance in multitenant solutions, https://learn.microsoft.com/en-us/azure/architecture/guide/multitenant/approaches/governance-compliance#key-considerations-and-requirements
• Deploying apps using Intune on the GCC High and DoD Environments, https://learn.microsoft.com/en-us/mem/intune/apps/apps-deploy-gcc-dod#compliance

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.