AUKUS license free environment, page-3

When it comes to international collaboration, especially between the USA and other countries like Australia, the compliance and security requirements become even more complex. Here's how Microsoft 365 GCC High and NC Protect could factor in:

### **1. Microsoft 365 GCC High:**

- **Limited to U.S. Entities:** Microsoft 365 GCC High is designed primarily for U.S. government agencies and defense contractors, with strict controls ensuring that all data is stored within the United States and handled by U.S. persons. This makes it challenging for non-U.S. entities, such as Australian organizations, to directly use GCC High unless they are working closely with U.S. counterparts under specific agreements.

- **Data Sovereignty:** If an Australian entity needs to collaborate with a U.S. organization using GCC High, they would likely encounter issues around data sovereignty and legal compliance, as GCC High is bound by U.S. laws and regulations like ITAR (International Traffic in Arms Regulations). These regulations often restrict the sharing of certain types of sensitive data outside the U.S.

### **2. NC Protect:**

- **Enhanced Control for International Collaboration:** NC Protect can enhance collaboration by implementing more granular access controls, ensuring that data is only accessible to authorized users based on attributes like nationality, location, and security clearance. This is particularly important for collaboration between the U.S. and Australia, where data might need to be shared securely while complying with both U.S. and Australian regulations.

- **Attribute-Based Access Control (ABAC):** This feature allows organizations to enforce strict access controls based on specific criteria, such as ensuring that only Australian or U.S. nationals with the proper clearances can access certain data. This would be crucial for joint projects between the U.S. and Australia where compliance with both countries' regulations is required.

- **Geolocation Restrictions:** NC Protect's ability to enforce geolocation restrictions ensures that data does not leave the jurisdiction it is supposed to stay in, which is essential for international collaboration under frameworks like ITAR.

### **Considerations for U.S.-Australia Collaboration:**

- **Shared Data Compliance:** If the collaboration involves sharing sensitive information that falls under U.S. regulations (like CUI or ITAR), then using GCC High, potentially with NC Protect, would ensure that data is shared securely and in compliance with U.S. laws. However, both parties need to ensure that they are also meeting Australian data protection laws.

- **Australian Government Cloud:** Australia has its own cloud services designed for handling government data, such as the Australian Government's Protected Cloud. Coordination between U.S. GCC High and Australia's equivalent services might require additional solutions or agreements to manage compliance across jurisdictions.

### **Conclusion:**

For countries collaborating outside the U.S., especially in contexts involving sensitive or classified data, **NC Protect** can be critical in ensuring compliance with international regulations. While Microsoft 365 GCC High may be restrictive for direct use outside the U.S., NC Protect can help bridge the gap by providing dynamic, attribute-based controls that enable secure, compliant collaboration between U.S. and non-U.S. entities like those in Australia. This makes it an essential tool for managing international defense and government projects.