Hi there,

Obligatory new to CMMC! And thank you very much for reading.

I work at a startup where roughly 25% of our work comes from DoD Contracts, and roughly 10% of people (3 or 4 people) work on those projects. We supposedly have a 110 SPRS score in the Microsoft Azule (Commercial!! GCC cloud) environment that our MSP IT firm set up and managed, though from research and conversations I've had with folks in this space recently, I HIGHLY doubt that. They themselves are not a CP3AO nor have we been formally audited.

The long and short of it - we are interested in moving from Microsoft to Google, and we are interested in getting a new IT MSP as we are quite unhappy with ours for many reasons. In looking into how this might work, I learned a bit about enclaves and how they are used. It seems given our situation and set-up, a Microsoft enclave may be the best option for us regardless of whether or not we migrate to Google.

We've tried asking our IT firm about this, but they have dismissed it and discouraged it many times. I'm looking into some of our many questions about whether or not we could realistically do this (mostly about the definition of CTI), but we have a non-technical question I would love some non-biased input on.

Would moving to an enclave set-up make us more or less attractive for future DoD bids, or have no affect vs a "whole" company setup with the same SPRS score? One of the main concerns is putting in a lot of effort and money to set it up, and somehow become less eligible or less attractive as bidders. It seems like no, but the original round of outreach to various providers (before my time) seemed to imply/hint that this is the case.

Thanks again for reading and in advance if you have any insight!