I know this is probably a question with a lengthy answer but we on M365 GCC High, we do deal with CUI. We do not own servers and utilize SharePoint as our main form of data storage. How much of NIST 800-171 is covered with M365 GCC High? We have E3 licenses and E5 for admin. I know to look at the Microsoft placemat but was hoping from experience someone could guide me in the right direction of what needs to get done to be compliant.