Microsoft 365 Government Community Cloud & Supporting Services

Microsoft lists Microsoft 365 Government Community Cloud & Supporting Services on the FedRAMP Marketplace with the status FedRAMP Certified, at Moderate impact, on the Agency path under the Rev5 process. Package MSO365MT, read from the marketplace feed as of September 3, 2026.

FedRAMP CertifiedRev5Agency path

Section A. Register entry

What the marketplace records

FedRAMP package ID: MSO365MT
Cloud service provider: Microsoft
Certification status: FedRAMP Certified
Impact level: Moderate
Certification class: Class C (Moderate)
Authorization path: Agency
Certification type: Rev5
Marketplace phase: Ongoing Certification
Deployment model: Public Cloud
Register snapshot: September 3, 2026
Service model: SaaS
Independent assessor: Kratos
Sponsoring agency: HHS Office of the Inspector General
Certification date: November 20, 2014
Status date: August 14, 2015
Annual assessment: July 31, 2011
Agency authorizations: 99
Recorded reuses: 453
Business categories: Analytics, Collaboration, Communication, Data Management, Storage
Dependent offerings: 65
Milestones on record: 3

The marketplace carries Microsoft 365 Government Community Cloud & Supporting Services under package MSO365MT with 21 recorded fields. Its certification date is November 20, 2014. Kratos is named as the independent assessor, with an annual assessment date of July 31, 2011. HHS Office of the Inspector General is recorded as the sponsoring agency. 91 agencies are listed as having authorized it, among them Alcohol and Tobacco Tax and Trade Bureau, American Battle Monuments Commission, Argonne National Laboratory and 88 more, and the feed records 453 reuses of the package. It is delivered as SaaS on a public cloud, filed under 5 business categories including Analytics, Collaboration, Communication and 2 more. 65 other offerings on the register are listed as dependent on this one, among them LibreView for US Government, Abnormal AI for Government and AchieveIt.

Section B. Milestones

3 entries in the marketplace event log

Most recent first, as recorded by FedRAMP.

Event logMSO365MT

Date	Category	Recorded
August 14, 2015	Status Change	Status changed from PMO Review to FedRAMP Certified
November 20, 2014	Status Change	Status changed from Agency Review to FedRAMP In Process
May 11, 2014	Status Change	Status set to Agency Authorization In Process

Section C. Cost context

What reaching Moderate costs

Our own published ranges for a provider going through this level. Nothing here is a figure this provider has disclosed.

Cost context

Budget for a Moderate authorization

Initial authorization$800,000 to $2,000,000

Continuous monitoring$150,000 to $350,000 a year

Typical timeline12 to 18 months

Control baseline325+ controls

Annual assessment$90,000 to $260,000 a year

Our published planning range for a provider pursuing Moderate. It is not a figure any listed provider has disclosed.

Read the FedRAMP Moderate cost guide / annual assessment cost / continuous monitoring cost

Path

Agency Authorization is the route for 578 of the offerings on the marketplace. Our cost pages put it at $800,000 to $2,000,000 over 12 to 18 months for Moderate. Agency authorization cost

Assessment and monitoring

An annual assessment date of July 31, 2011 is on the record, and that assessment recurs for as long as the package stays listed. Annual assessment cost / continuous monitoring cost

Section E. Agencies on the record

91 agencies listed against this package

As published on the marketplace. An agency named here has issued its own authorization to operate; FedRAMP does not issue ATOs itself.

Alcohol and Tobacco Tax and Trade Bureau
American Battle Monuments Commission
Argonne National Laboratory
Brookhaven Site Office
Bureau of Economic Analysis
Centers for Disease Control and Prevention
Commodity Futures Trading Commission
Consumer Financial Protection Bureau
Consumer Product Safety Commission
Corporation for National & Community Service
Council of the Inspectors General on Integrity and Efficiency
Court Services and Offender Supervision Agency
Customs and Border Protection
DHS Headquarters
Defense Nuclear Facilities Safety Board
Department of Agriculture
Department of Commerce
Department of Education
Department of Energy
Department of Housing and Urban Development
Department of Justice
Department of Labor
Department of State
Department of Transportation
Department of the Interior
Environmental Management Consolidated Business Center
Environmental Protection Agency
FHFA Office of the Inspector General
Farm Credit Administration
Federal Aviation Administration
Federal Communications Commission
Federal Deposit Insurance Corporation
Federal Energy Regulatory Commission
Federal Housing Finance Agency
Federal Maritime Commission
Federal Reserve System
Federal Retirement Thrift Investment Board
Federal Trade Commission
Fermi National Accelerator Laboratory
First Responder Network Authority
Food and Drug Administration
Golden Field Office
HHS Office of the Inspector General
HUD Office of Inspector General
Health Resources and Services Administration
Immigration and Customs Enforcement
Indian Health Services
Internal Revenue Service
International Trade Administration
Millennium Challenge Corporation
National Aeronautics and Space Administration
National Capital Planning Commission
National Endowment for the Arts
National Institute of Standards and Technology
National Institutes of Health
National Labor Relations Board
National Nuclear Security Administration / Kansas City Field Office
National Nuclear Security Administration / Lawrence Livermore National Laboratory
National Science Foundation
National Telecommunications and Information Administration
National Training Center
Nuclear Regulatory Commission
Oak Ridge National Laboratory
Office of Financial Research
Office of Justice Programs
Office of the Comptroller of the Currency
Pension Benefit Guaranty Corporation
Postal Regulatory Commission
Pretrial Services Agency
Savannah River National Lab
Small Business Administration
Social Security Administration
Southwestern Power Administration
State Office of the Inspector General
Surface Transportation Board
Tennessee Valley Authority
Transportation Security Administration
Treasury Inspector General for Tax Administration
U.S. Election Assistance Commission
U.S. Office of Special Counsel
United States Census Bureau
United States Equal Employment Opportunity Commission
United States International Trade Commission
United States Mint
United States Office of Government Ethics
United States Patent and Trademark Office
United States Secret Service
United States Securities and Exchange Commission
United States Trade and Development Agency
Universal Service Administrative Company
Warfighting Acquisition University

Section F. Dependent offerings

65 listed offerings build on this package

From the marketplace's dependent products view. A provider that inherits controls from a package below it carries a narrower assessment boundary of its own, which is one of the larger levers on authorization cost.

Showing 24 of 65. The remainder are listed on the marketplace record for package MSO365MT.

Inheritance is why boundary scope moves a budget more than headcount does. The hidden costs page sets out where scope creeps back in.

Section G. Nearest entries on the register

Comparable offerings

Scored on impact level, path, status, shared business categories and how close the two entries sit in the register's own timeline.

Microsoft lists 5 offerings on the marketplace. The others are:

Azure Commercial Cloud High Azure Government (includes Dynamics 365) High Microsoft 365 Government Community Cloud & Supporting Services High Microsoft 365 Government Community Cloud-High High

CorityOne
Cority Software Inc.
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified August 29, 2022.
Tyler Data Platform, powered by Socrata
Tyler Technologies Data & Insights
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified May 15, 2017.
Decision Lens Software
Decision Lens Inc.
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified December 21, 2015.
Cornerstone Galaxy
Cornerstone OnDemand
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified February 2, 2016.
TalaTek intelligent Governance and Risk Integrated Solution (TiGRIS)
TalaTek, LLC
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified November 1, 2019.

Section H. Description

As published on the marketplace

The provider's own description of the service, reproduced from the FedRAMP feed without edits.

Microsoft 365 (M365) Government Community Cloud (GCC) is a suite of cloud-hosted messaging and collaboration services to meet the unique and evolving requirements of the United States Federal, State, Local, and Tribal governments, as well as contractors holding or processing data on behalf of the US Government. These cloud-based services are designed to provide organizations with streamlined communication, high availability, comprehensive security, and simplified information technology (IT) management. M365 GCC provides the interactivity of on-premises client and server applications with the flexibility and scalability of web-based services. M365 GCC leverages Azure Government as the IaaS/PaaS for the underlying infrastructure and hardware. Therefore, M365 GCC relies on Azure Government-inherited services. For more information on these Azure Government services, refer to the Azure Government ATO package. Federal agencies interested in collaborative continuous monitoring with Microsoft should reach out to: [email protected]

Next step

What the same authorization would cost you

The worksheet turns an impact level, an existing security posture and an organization size into a line-by-line budget, with the 3PAO fee split out.

Open the Cost Worksheet →More FedRAMP Certified offerings

Provenance and independence

Source: the FedRAMP Marketplace product feed, produced by the General Services Administration. The feed's own last-change stamp is September 3, 2026; this copy was taken on September 5, 2026.

GSA's disclaimers page states that FedRAMP content about a specific commercial product or service is provided for the information and convenience of the public and “does not constitute endorsement, recommendation, or favoring by the General Services Administration”. A listing here is a record of a certification status, not a judgment about the product.

FedRAMPCost.com is an independent cost reference. We are not affiliated with FedRAMP, the GSA, any provider listed on this page, or any assessment organization, and no provider pays to appear in this register.