Case Study: Implementing a Turnkey Microsoft 365 GCC High Enclave for JetCo Solutions

Summary

JetCo Solutions, partnering with organizations working with the U.S. federal government, contacted Jadex Strategic Group to implement a Microsoft 365 GCC High Enclave. This achieved significant compliance and security goals. Jadex configured systems to meet specifications and provided documentation, reaching 82% for NIST 800-171 and 81% for CMMC Level 3 per Microsoft Purview.

Challenge

JetCo Solutions faced the daunting task of transitioning to a highly secure and compliant GCC High Enclave in order to meet stringent governmental and industry standards. Like many, their knowledge of the advanced features and capabilities related to Microsoft 365 was limited. The primary challenge was to ensure that their Microsoft 365 platform was configured to meet the specific requirements of NIST 800-171 and CMMC Level 3, essential for handling sensitive information and maintaining operational integrity.

Strategy

Jadex Strategic Group adopted a comprehensive approach to achieve the desired compliance and security levels for JetCo Solutions through the implementation of a GCC High Enclave. The strategy involved gaining access to the GCC High Microsoft tenant, removing unauthorized users, and creating and verifying user accounts with appropriate licenses. Organizational settings were configured to align with best practices for security and compliance, including implementing DNS records, retention labels, and anti-malware policies.

A key component of this strategy is leveraging Microsoft Purview’s Compliance Manager to manage assessments and track improvement actions related to NIST 800-171 and CMMC Level 3 compliance within the GCC High Enclave. By utilizing Compliance Manager, Jadex was able to systematically assess compliance, identify gaps, and prioritize remediation efforts. This ensured that endpoint security, administrative policies, and device onboarding were robust and aligned with regulatory requirements. As a result, JetCo Solutions has access to a secure and compliant GCC High Enclave, prepared for further operationalization and ongoing assessment management.

Results

The implementation of the Microsoft 365 GCC High Enclave by Jadex Strategic Group resulted in several outcomes. They achieved 82% completion for NIST 800-171 and 81% for CMMC Level 3 compliance, enhanced security through endpoint detection, response policies, and anti-malware measures, and increased organizational efficiency by automating data retention and compliance policies. Following the completion of all configurations, improvement actions, and documentation, Jadex Strategic Group debriefed JetCo Solutions and provided training on each configuration throughout the project. Consequently, JetCo Solutions received a turnkey sovereign GCC High Enclave ready for operational use to work with the federal government.

This case study highlights Jadex Strategic Group’s expertise in creating secure, compliant IT infrastructures tailored to meet the specific needs of government contractors and other regulated industries.