Achieving Compliance and Access Control in a Government Cloud Migration

Providing government workforces with the right digital tools can help agencies to reduce technical debt, deliver cost-savings, and enhance overall digital modernization efforts.

One of the key ways to achieve this is by migrating to a M365 cloud-hosted environment. This can also reduce Operations and Maintenance (O&M) costs, as well as provide opportunities for future scalability, enhancements, and flexibility.

Makpar recently helped a government customer migrate to a M365 cloud-hosted environment by offering Program Management support, which included technical subject matter expertise and execution support. 

From a data workload and user perspective, this was a significant effort. The result is that now more than 102,000 users can leverage enhanced productivity capabilities in an M365 cloud-hosted environment. 

But it does not end with the cloud migration. There are many more considerations for other agencies looking to achieve similar outcomes from a cloud based M365 migration.

Here are a few:

• Achieve Regulatory Compliance:

  • A United States federal law passed in 2002, the Federal Information Security Management Act (FISMA), requires that federal agencies develop, document, and implement an information security and protection program. This effort fully complies with the FISMA requirements and ensured that proper security plans were in place along with continuous monitoring.

• Identity and Access Management:

  • Leveraging Makpar’s Identity, Credential, and Access Management (ICAM) capabilities, the team was able to develop a governance plan around roles, responsibilities and access. This allows for the provisioning of privileged access, as well as further meets FISMA requirements.

• Leveraging Existing Processes:

  • The Makpar team also uses the customer’s existing system for granting access and entitlements. The team also fully understands the customer’s organization and uses this knowledge to grant access privileges to only the necessary users. 

• Centralized Control and Visibility for Providing Access:

  • Any users requesting access needs to agree to the terms and agreements, and the customer’s central office needs to approve access. This points to the value of having centralized control, providing an extra layer of security and access management.

Moving to a M365 cloud environment does not end when the migration is complete. The right identity and access control efforts can help meet key compliance efforts, and bolster efforts to keep important data secure – while also keeping employees productive.

Read the full case study here. Want to discuss how Makpar can help achieve your agency’s modernization goals? Get in touch with us today.