For Defense Contractors, Copilot in GCC High Uses Existing CUI Permissions

eSoftware Associates advises defense contractors to conduct thorough access reviews before deploying Microsoft 365 Copilot, ensuring compliance with CMMC Level 2 requirements and proper handling of controlled unclassified information (CUI). The company emphasizes that cloud environment selection (GCC vs. GCC High), user permissions, and sensitivity-label encryption must be properly configured to prevent unauthorized data access through Copilot responses.