DoD IL6 "Secret" Cloud Collaboration

Principal workflows

• Onboard: Moraph works with your program office, security staff and Microsoft to bring your organization into use on the platform, following the steps your authorization process requires.
• Administer: Day-to-day administration of email, Teams, users, groups and policies is carried out by cleared Moraph staff, within the permissions your organization grants.
• Change: Configuration changes follow your change and authorization process. Moraph prepares the request and its security impact notes, and implements only what your organization approves.
• Monitor and review: Moraph watches service health and the alerts your organization routes to it, supports your security staff on incidents, and reviews the service with you on a regular cycle.

Who uses it

• DoD components and commands adopting Microsoft 365 at the Secret level
• Command IT leads and program offices who own the collaboration service
• Information system security managers and officers responsible for the environment
• Authorizing officials' staff who need evidence of how the environment is run
• Defense agencies supplementing their own cleared administration teams

Reporting

• Requests by type, site and age
• Changes with their approvals and verification
• Configuration baseline check results
• Administrative access review status
• Alerts triaged and incidents supported
• Microsoft service notices and their effect

Features

• Cleared administration: Administration carried out by Moraph staff who are US citizens with active clearances at the level your organization requires, verified by your security office.
• Classified email: Exchange Online, as available in Microsoft's Secret cloud, configured for your mailboxes, distribution groups, transport rules and retention.
• Teams chat and meetings: Microsoft Teams, as available in that cloud, configured with the team, channel, meeting and external access policies your organization approves.
• Configuration baseline: The approved tenant configuration documented as a baseline, checked by Moraph on a regular cycle, with any drift reported to your security staff.
• Change management: Every configuration change prepared, approved through your process, implemented and verified, with the record kept for your authorization package.
• User and group administration: Accounts, groups, licences and mailboxes created, changed and removed as requested through your process.
• Privileged access control: Administrative roles in the platform assigned with least privilege and, where your organization enables it, time-bound elevation.
• Alert triage: Alerts from the platform that your organization routes to Moraph are reviewed and passed on with context to your security operations or CSSP.
• Incident support: Moraph administrators support investigations and containment actions as directed by your security staff.
• Access reviews: Periodic reviews of administrative and privileged access prepared for your ISSM to certify.
• Licence management: Licence counts and assignments tracked against what your organization has purchased, with changes requested through your contracting office.
• Service reporting: Regular reports on requests, changes, alerts, access reviews and Microsoft service notices, for your program office and security staff.

Integrations

• Your identity and credentials: Users and Moraph administrators sign in with identities and credentials issued by your organization; Moraph does not issue or hold them.
• Your ticketing system: Requests, changes and incidents are worked in your organization's ticketing system where you require it, or in Moraph's service records on the classified network you approve.
• Security operations or CSSP: Alerts and incident information are passed to your security operations team or cybersecurity service provider as your procedures set.
• Change board: Change requests and security impact notes are prepared in the format your change board and ISSM use.
• Records management: Retention and records settings in the platform are configured to follow your records schedule as approved by your records officer.
• Moraph Zero Trust overlay: Where your organization also uses Moraph's Zero Trust "Black Cloud" Overlay, administration of both is coordinated by the same service manager.

Deployment

• Fully managed administration: Moraph's cleared staff carry out day-to-day administration of the tenant, with your organization approving changes and access.
• Co-administration: Moraph administrators work alongside your own administration team, with responsibilities split as agreed in the service description.
• Onboarding support only: Moraph supports configuration and onboarding, then hands day-to-day administration to your team.

Security and privacy

• Cleared US personnel: Every ticket for this service is handled only by Moraph staff who are US citizens with active clearances, verified by your security office.
• Access under your authority: Moraph administrators use credentials and access your organization issues, from facilities and networks it approves, and lose access when you remove it.
• Least privilege: Administrators hold only the platform roles their work needs, with time-bound elevation where your organization enables it.
• Complete audit trail: Every Moraph action is tied to a request or change record and appears in the platform's audit log.
• Encryption and keys: Moraph staff cannot use client encryption keys without explicit, time-bound authorization from your organization.
• US-only operations: Service operations for US government clients take place only in the United States.

Limitations

• Moraph is not Microsoft. The platform, its features and its operation belong to Microsoft, and Microsoft's own service commitments, roadmap and outages apply.
• Licences are bought and held under Microsoft's terms and your organization's contract vehicle; Moraph resells and manages them but does not set their terms.
• Moraph does not hold or claim any authorization or accreditation for the platform or your environment. Authorization is maintained by Microsoft for the platform and by your authorizing official for your use.
• Features available in Microsoft's Secret cloud can differ from commercial Microsoft 365, and Moraph cannot add features the platform does not provide.
• Moraph staff work only under your organization's authority, with the access, credentials, facilities and networks it provides and approves.
• Moraph does not provide classified network connectivity, end-user devices or facilities.
• Moraph does not classify, mark or review content. Classification and handling decisions remain with your users and classification authorities.
• Transfers of information between networks at different classification levels are not included in this service.

Next steps

Book a demonstration or a technical briefing at www.moraph.com/solutions/dod-il6-secret-cloud-collaboration. Purchasing routes and company information: www.moraph.com/how-to-buy.