I am a one person government contractor who has a GCC High Microsoft subscription. I am self-learning how to set up my security controls in the Microsoft Azure environment to meet the CMMC requirements. I previously had a Microsoft commercial subscription and leveraged the Secure Score in Microsoft Azure's Security Center to help me learn where I could strengthen my security posture. I recently signed up for an Azure Government paid subscription, yet my secure score is only showing a total of 14 of 14 points. The controls covered are scarce: Enable MFA; Manage Access and Permissions; and Implement Security Best Practices. Note: I am entirely cloud based; I have no on premises eqpt.
Questions:
1. Does anyone know how long it takes for Secure Score to populate fully? (I've had the subscription for about 4 days, to include over the weekend.)
2. Does anyone know if Secure Score will ever populate in the GCC High environment?
I look forward to hearing from the community. Thank you!