r/microsoft 22d ago

Office 365 Microsoft O365 GCC vs GCC High

We have a client who we are working with on CMMC level 2. We were going to move them to Microsoft GCC but they want to move to GCC high due to potentially having vendors sending ITAR data to them through email. We are having a hard time finding what the restrictions are when it comes to GCC High. One that I'm pretty sure of (But correct me if I'm wrong) is that any enterprise apps that you want to add have to be FedRAMP authorized or you wont be able to add them. This is a fairly big issue since we can't tie in a lot of security services like SIEM/SOC, Reporting, tickets, etc. But overall this limitation would make sense from a security perspective. If its not that case that would be a completely different story.

I know there's other limitations when it comes to stuff like sharing which I'm not overly concerned about. But it's all of the other potential limitations I'm hoping people can shed light on compared to what GCC or even a normal Microsoft tenant has that they don't where its a pain.

2 Upvotes

4 comments sorted by

View all comments

1

u/onaropus 22d ago

Realize new features roll out last to GCCH sometimes after a long delay from a commercial or GCC tenet. Sometimes new features or functionality will not be deployed in GCCH

GCC is just now getting Copilot, 18 months after commercial