Re:Decisions that eroded trust in Azure – by a former Azure ...
by staticassertion on Sunday April 05, 2026 @04:02PM
(#47653298)
What's the most common architecture you see for CMMC enclaves, especially those built by outside consulting firms?
Re:Decisions that eroded trust in Azure – by a former Azure ...
by Spooky23 on Sunday April 05, 2026 @11:33PM
(#47656688)
I don’t work in defense, and neither does FedRAMP.
Re:Decisions that eroded trust in Azure – by a former Azure ...
by staticassertion on Monday April 06, 2026 @09:51AM
(#47660936)
Great, then I'll tell you. It's a bunch of FedRAMP certified Microsoft services.
FedRAMP is demonstration that the solution met some assessment of controls in alignment with NIST 800-53. As a checkbox, it’s almost as dumb as FIPS 140, and like FIPS, you need to asses risk for your implementation regardless of these things.
Microsoft wins deals because their product catalog is well engineered to incentivize bundled subscriptions that drive marginal adoption. The user facing products are better, Entra is generally right there, and that’s a pivot into many other scenarios that drive spend.