Federal Risk and Authorization Management Program (FedRAMP) - Microsoft Compliance

Publisher

Microsoft

URL

https://learn.microsoft.com/en-us/compliance/regulatory/offering-fedramp

Published

2026-02-24

Updated

unknown

Accessed

2026-10-02

HTTP status

200

License

CC BY 4.0 (Microsoft Learn docs); short excerpts with attribution

Source notes citing this source

• Microsoft states that customers can build on its FedRAMP certifications for an agency ATO but must achieve their own authorizations for components outside Microsoft's services. in context
• Microsoft's FedRAMP compliance page (updated September 2026) still presents a JAB provisional ATO as a current path and describes FedRAMP authorizations as granted at three impact levels. disputed in context
• Office 365 U.S. Government GCC and GCC High hold ATOs from US agencies, while Office 365 U.S. Government Defense holds a provisional ATO from DISA. in context
• Office 365 GCC is listed on the FedRAMP Marketplace under the name Office 365 (Commercial), also called Office 365 Multitenant, even though it is the government community environment. in context
• Microsoft lists Microsoft Teams as an in-scope FedRAMP service in each of the Office 365 GCC, GCC High and DoD environments. in context

Cite this source record

APA

WarmTransfer. (2026, February 24). Federal Risk and Authorization Management Program (FedRAMP) - Microsoft Compliance. WarmTransfer. https://warmtransfer.net/knowledge/sources/ms-learn-compliance-offering-fedramp

BibTeX

@misc{warmtransfer-ms-learn-compliance-offering-fedramp,
  title  = {Federal Risk and Authorization Management Program (FedRAMP) - Microsoft Compliance},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/ms-learn-compliance-offering-fedramp},
  note   = {Microsoft, accessed 2026-10-02}
}