Microsoft’s Government Community Cloud High (GCC High) was approved by the federal cybersecurity program FedRAMP despite years of documented security deficiencies, including a scathing internal critique calling it a 'pile of shit.' The tech giant repeatedly failed to provide comprehensive encryption documentation requested by reviewers, leaving them unable to assess the system’s security posture. This approval occurred even though Microsoft’s products were implicated in two major U.S. government cyberattacks—Russian hackers exploited a Microsoft weakness to steal data from agencies including the National Nuclear Security Administration, while Chinese hackers breached a Cabinet member’s email. FedRAMP’s decision, which included a 'buyer beware' warning, allowed Microsoft to expand its government cloud business worth billions.

The program’s collapse into a 'security theater' rubber stamp—due to understaffing and rushed authorizations—exposes critical vulnerabilities in federal cybersecurity oversight.