{"id":90911,"date":"2014-11-20T09:00:42","date_gmt":"2014-11-20T17:00:42","guid":{"rendered":"http:\/\/www.microsoft.com\/?p=90911"},"modified":"2022-07-20T08:05:10","modified_gmt":"2022-07-20T15:05:10","slug":"office-365-receives-fedramp-authority-operate-ato-hhs-oig","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/","title":{"rendered":"Office 365 receives FedRAMP Authority to Operate (ATO) from HHS OIG"},"content":{"rendered":"

Bill Birkholz is the principal program manager for the Office 365 Trust team and Vijay Kumar is the senior product manager for the Office 365 team.<\/em><\/p>\n

We are pleased to announce that Microsoft Office 365 has been granted FedRAMP Authority to Operate (ATO) by the Department of Health and Human Services Office of the Inspector General (HHS OIG).\u00a0Office 365 is a multi-tenant cloud that includes government specific instances of services such as Exchange Online, SharePoint Online and Lync Online.\u00a0 Government-specific instances of Office 365 services are designated for use solely by U.S federal, tribal, state and local government customers, and Federally Funded Research and Development Centers (FFRDCs).<\/p>\n

The Federal Risk and Authorization Management Program (FedRAMP) is a U.S. government-wide program whose goal is to accelerate adoption of secure cloud solutions and provide a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services.<\/p>\n

Office 365 has completed testing against the stringent set of FedRAMP requirements, based on NIST 800-53, by Dynamic Research Corporation, a FedRAMP accredited Third Party Assessment Organization (3PAO). \u00a0The HHS OIG authorization further validates Office 365 security at the Moderate impact level to store, process and protect sensitive government data.<\/p>\n

“Microsoft’s authorization with HHS OIG makes Office 365 the first cloud based email and collaboration service\u00a0to obtain a FedRAMP authorization,” said Matt Goodrich, acting FedRAMP director at the General Services Administration. “Microsoft worked with the HHS OIG and the FedRAMP PMO to demonstrate Office 365’s\u00a0adherence\u00a0to the stringent FedRAMP security requirements that are critical for U.S. government adoption of cloud services.”<\/p>\n

Security and compliance are important for all customers of Office 365 and are core to how we design and manage the service. As we rapidly innovate in productivity services with Office 365, we will continue to invest in making Office 365 a service that is highly secure and compliant with global as well as regional and industry specific standards and regulations.<\/p>\n

Frequently asked questions<\/h3>\n

Q. What is FedRAMP?<\/strong><\/p>\n

A.\u00a0<\/strong>The Federal Risk and Authorization Management Program (FedRAMP) is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. FedRAMP is mandatory for Federal Agency cloud deployments and service models.<\/p>\n

Q. Why is FedRAMP important?<\/strong><\/p>\n

A.<\/strong> FedRAMP is based on the stringent security requirements defined by NIST 800-53 standard and provides a uniform approach to risk based management. Through this uniform approach, FedRAMP allows federal agencies to save significant time, costs and resources in their evaluation of the security of cloud providers.<\/p>\n

Q. <\/strong>What level of FedRAMP does Office 365 meet?<\/strong><\/p>\n

A.<\/strong>Office 365 has been assessed at a moderate level by a 3PAO (Third-party Assessment Organization) and awarded a FedRAMP ATO from HHS OIG.<\/p>\n

Q. Which Office 365 plans or SKUs does FedRAMP ATO apply to?<\/strong><\/p>\n

A.<\/strong> FedRAMP ATO applies to Office 365 Government plans in the US \u2013 E1, E3, E4 and standalone plans like Exchange Online Plan 1, Exchange Online Plan 2 etc. Office 365 Government plans in the US are also referred to as the Government Community Cloud (GCC).<\/p>\n

Q. How does FedRAMP ATO help Office 365 customers that use commercial plans or customers that are not US Government agencies?<\/strong><\/p>\n

A.<\/strong> Office 365 Government in the U.S. or \u2018Government Community Cloud\u2019 (GCC) as it is commonly known, is built on the same multi-tenant service as the commercial Office 365 plans. The majority of the processes and technology that help the Government Community Cloud meet the strict FedRAMP standards are identically implemented in the Office365 commercial plans. \u00a0This ATO signifies Microsoft\u2019s commitment to ensuring Office 365 is highly secure and compliant with important industry and government standards and regulations.<\/p>\n","protected":false},"excerpt":{"rendered":"

We are pleased to announce that Microsoft Office 365 has been granted FedRAMP Authority to Operate (ATO) by the Department of Health and Human Services Office of the Inspector General (HHS OIG). Office 365 is a multi-tenant cloud that includes government specific instances of services such as Exchange Online, SharePoint Online and Lync Online. Government-specific instances of Office 365 services are designated for use solely by U.S federal, tribal, state and local government customers, and Federally Funded Research and Development Centers (FFRDCs).<\/p>\n","protected":false},"author":3368823,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"_classifai_error":"","footnotes":""},"content-type":[4034],"product":[4048,4036,4066],"audience":[4081,4091],"tags":[],"coauthors":[4437],"class_list":["post-90911","post","type-post","status-publish","format-standard","hentry","content-type-news","product-exchange","product-microsoft-365","product-sharepoint","audience-enterprise","audience-government"],"yoast_head":"\nOffice 365 receives FedRAMP Authority to Operate (ATO) from HHS OIG | Microsoft 365 Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Office 365 receives FedRAMP Authority to Operate (ATO) from HHS OIG | Microsoft 365 Blog\" \/>\n<meta property=\"og:description\" content=\"We are pleased to announce that Microsoft Office 365 has been granted FedRAMP Authority to Operate (ATO) by the Department of Health and Human Services Office of the Inspector General (HHS OIG). Office 365 is a multi-tenant cloud that includes government specific instances of services such as Exchange Online, SharePoint Online and Lync Online. Government-specific instances of Office 365 services are designated for use solely by U.S federal, tribal, state and local government customers, and Federally Funded Research and Development Centers (FFRDCs).\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft 365 Blog\" \/>\n<meta property=\"article:published_time\" content=\"2014-11-20T17:00:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-07-20T15:05:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-content\/uploads\/sites\/2\/2022\/06\/cropped-microsoft_logo_element.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"512\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"The Microsoft 365 Marketing Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"The Microsoft 365 Marketing Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 min read\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/\"},\"author\":[{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/author\/the-microsoft-365-marketing-team\/\",\"@type\":\"Person\",\"@name\":\"The Microsoft 365 Marketing Team\"}],\"headline\":\"Office 365 receives FedRAMP Authority to Operate (ATO) from HHS OIG\",\"datePublished\":\"2014-11-20T17:00:42+00:00\",\"dateModified\":\"2022-07-20T15:05:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/\"},\"wordCount\":605,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#organization\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/\",\"name\":\"Office 365 receives FedRAMP Authority to Operate (ATO) from HHS OIG | Microsoft 365 Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#website\"},\"datePublished\":\"2014-11-20T17:00:42+00:00\",\"dateModified\":\"2022-07-20T15:05:10+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Office 365 receives FedRAMP Authority to Operate (ATO) from HHS OIG\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/\",\"name\":\"Microsoft 365 Blog\",\"description\":\"Microsoft 365 brings together Office 365, Windows 10, and Enterprise Mobility + Security. It delivers a complete, intelligent, and secure solution to empower people.\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#organization\",\"name\":\"Microsoft 365 Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-content\/uploads\/sites\/2\/2019\/08\/ms-logo-amp.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-content\/uploads\/sites\/2\/2019\/08\/ms-logo-amp.png\",\"width\":279,\"height\":60,\"caption\":\"Microsoft 365 Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Office 365 receives FedRAMP Authority to Operate (ATO) from HHS OIG | Microsoft 365 Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/","og_locale":"en_US","og_type":"article","og_title":"Office 365 receives FedRAMP Authority to Operate (ATO) from HHS OIG | Microsoft 365 Blog","og_description":"We are pleased to announce that Microsoft Office 365 has been granted FedRAMP Authority to Operate (ATO) by the Department of Health and Human Services Office of the Inspector General (HHS OIG). Office 365 is a multi-tenant cloud that includes government specific instances of services such as Exchange Online, SharePoint Online and Lync Online. Government-specific instances of Office 365 services are designated for use solely by U.S federal, tribal, state and local government customers, and Federally Funded Research and Development Centers (FFRDCs).","og_url":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/","og_site_name":"Microsoft 365 Blog","article_published_time":"2014-11-20T17:00:42+00:00","article_modified_time":"2022-07-20T15:05:10+00:00","og_image":[{"width":512,"height":512,"url":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-content\/uploads\/sites\/2\/2022\/06\/cropped-microsoft_logo_element.webp","type":"image\/png"}],"author":"The Microsoft 365 Marketing Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"The Microsoft 365 Marketing Team","Est. reading time":"2 min read"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/"},"author":[{"@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/author\/the-microsoft-365-marketing-team\/","@type":"Person","@name":"The Microsoft 365 Marketing Team"}],"headline":"Office 365 receives FedRAMP Authority to Operate (ATO) from HHS OIG","datePublished":"2014-11-20T17:00:42+00:00","dateModified":"2022-07-20T15:05:10+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/"},"wordCount":605,"commentCount":0,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#organization"},"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/","url":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/","name":"Office 365 receives FedRAMP Authority to Operate (ATO) from HHS OIG | Microsoft 365 Blog","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#website"},"datePublished":"2014-11-20T17:00:42+00:00","dateModified":"2022-07-20T15:05:10+00:00","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2014\/11\/20\/office-365-receives-fedramp-authority-operate-ato-hhs-oig\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/"},{"@type":"ListItem","position":2,"name":"Office 365 receives FedRAMP Authority to Operate (ATO) from HHS OIG"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/","name":"Microsoft 365 Blog","description":"Microsoft 365 brings together Office 365, Windows 10, and Enterprise Mobility + Security. It delivers a complete, intelligent, and secure solution to empower people.","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#organization","name":"Microsoft 365 Blog","url":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-content\/uploads\/sites\/2\/2019\/08\/ms-logo-amp.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-content\/uploads\/sites\/2\/2019\/08\/ms-logo-amp.png","width":279,"height":60,"caption":"Microsoft 365 Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/#\/schema\/logo\/image\/"}}]}},"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft 365 Blog","distributor_original_site_url":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/posts\/90911"}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/users\/3368823"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/comments?post=90911"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/posts\/90911\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/media?parent=90911"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/content-type?post=90911"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/product?post=90911"},{"taxonomy":"audience","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/audience?post=90911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/tags?post=90911"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/wp-json\/wp\/v2\/coauthors?post=90911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}