There are a lot of questions surrounding the upcoming DFARS requirements for DoD Contractors. What does it mean for your business? What happens if you're not compliant in time? To help guide you through the process, here are some questions and answers that you may need to know. Did you miss the first six FAQ's? Check them out here.
7. Will we receive documentation that we are fully compliant after configuration is completed?
Yes, Summit 7 Systems provides complete documentation for all environments we build and projects that we execute.
8. How can our IT monitor our whole environment if it is in the cloud?
Microsoft provides dozens of monitoring tools to ensure that you have full awareness and that Microsoft is fully transparent with all customer data.
9. We are a federal contractor, but we don’t have any DoD contracts. Do we still need to be DFARS compliant?
Your company is only required to be DFARS compliant if you are a prime or sub-contractor on a contract that includes the applicable DFARS clause 252.204-7012.
10. If O365 is accessible anywhere on any device, how can our IT department monitor activity and prevent cyber incidents?
Office 365 has many security, auditing and management tools that can give you full fidelity information on everything that is happening within the Office 365 environment. You can see every email, document or access request to all components of the system.
11. What’s the difference between O365 and Azure? How do those choices affect by ability to be compliant? Do I need both or either or?
Office 365 is a Software As A Service (SaaS) platform while Azure is a mixture of Infrastructure As A Service (IaaS), Platform As A Service (PaaS) and Software As A Service (SaaS) environments.
Essentially, Office 365 can provide the clear majority of the standard collaboration needs that a company may have, but if you have specific or custom computing requirements, Azure can help you move those existing line of business or other applications to the cloud.
12. I don’t want to go to the cloud. What are my options of being compliant if I just upgrade to SP2016 on-prem?
SharePoint 2016 and other on premises solutions can be made compliant. However, the process can take significantly more time and expense than moving your IT environment to the cloud. The cloud environments are continually audited to ensure security and compliance with all the relevant standards.
This FAQ is part of a series. Be sure to subscribe and get notified when there's a new post, or check back soon for the next post in the series!