Meeting government security mandates can be challenging to say the least.  It’s often a laborious and confusing process.  A myriad of controls all need to be addressed and proven to assessors. Microsoft has assembled a collection of documents that assists Federal customers in understanding which security controls are inherited from Azure and which remain the responsibility of the customer.