Reference
"Civic-Secure" Microsoft 365 glossary
Terms used in "Civic-Secure" Microsoft 365 and its documentation.
Applies to "Civic-Secure" Microsoft 365 as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.
Terms used in "Civic-Secure" Microsoft 365 and its documentation.
| Term | Meaning |
|---|---|
| GCC | Microsoft's Government Community Cloud, the Microsoft 365 environment for US government customers that keeps customer data in the United States. |
| CJIS Security Policy | The FBI policy that sets the security requirements for systems and people handling criminal justice information. |
| LASO | Local Agency Security Officer, the person at the agency responsible for CJIS compliance and approving security-relevant changes. |
| CJIS Systems Agency | The state agency that manages CJIS access in your state and audits local agencies against the CJIS Security Policy. |
| Configuration baseline | The documented set of Microsoft 365 GCC settings the agency approved, which Moraph applies and checks for drift. |
| Configuration drift | A difference between a live tenant setting and the approved baseline, caused by a change or a Microsoft service update. |
| Conditional access | Microsoft Entra ID rules that allow or block sign-in based on the user, device compliance and location. |
| Sensitivity label | A Microsoft Purview label that marks a document or email as containing criminal justice information and applies protection. |
| Data loss prevention | Purview policies that detect sensitive or labeled content being shared outside allowed recipients and warn or block. |
| Guest | A user from an approved partner agency or court who has access to specific teams or sites in your tenant. |
Was this page helpful?
Report a problem with this page
Need help with your own setup rather than this page? Raise a support ticket.