Federal Cyber Experts Criticize Microsoft Cloud but Approve Its Use Despite Risks

Federal cybersecurity evaluators harshly criticized Microsoft's GCC High cloud service in 2024, describing it with terms like "a pile of shit" due to poor security documentation and lack of confidence in its protections. Despite these serious concerns, the cloud service received FedRAMP authorization, enabling its widespread deployment within U.S. government agencies. This situation reveals potential conflicts of interest and systemic weaknesses in government cybersecurity oversight, raising questions about the rigor of future approvals and the need for reform in cloud security evaluations.