The idea that Office 365 is compliant for use in any regulated space is *absolutely laughable*, but apparently the reason GCC High is approved for government use is because the government let agencies use it while they were evaluating it, and then realized so many agencies were now dependent on it, that they had to approve it even though it wasn't able to actually meet the security criteria.

arstechnica.com/information-te…

#microsoft

Federal cyber experts called Microsoft's cloud a "pile of shit," approved it anyway

One Microsoft product was approved despite years of concerns about its security.

^{ProPublica (Ars Technica)}