Skip to main content
Back to Case Studies
GovernmentMigrations

Anonymized engagement summary — Federal Agency SharePoint Migration

Last updated by Errin O'Connor, Founder & Chief AI Architect, EPC Group

30,000 Users & 15M Documents - FedRAMP High

U.S. Federal Agency
14 months
18 consultants
30,000
Users Migrated
15M
Documents
FedRAMP High
Microsoft cloud authorization, not EPC
35%
Cost Reduction
0
Security violations reported
ATO
Maintained

Outcome figures on this page are EPC Group engagement data for an anonymized client, recorded by the delivery team at project close. They are not independently audited, and no client-issued measurement is published for them. How EPC Group counts · Documented engagements

Client not named at EPC Group's discretion; this record is EPC-reported and is not part of the Evidence Center classes.

Overview

A U.S. federal agency required migration of 30,000 employees and 15 million documents from on-premises SharePoint 2010 to SharePoint Online while meeting stringent FedRAMP High security requirements. The project involved classified data, complex security clearance requirements, and strict government oversight.

The Challenge

The federal migration presented exceptional security and compliance challenges:

  • FedRAMP High authorization requirements for all data and systems
  • SharePoint 2010 environment requiring significant metadata remediation
  • Classified and sensitive but unclassified (SBU) data requiring special handling
  • Complex permission structures with security clearance-based access
  • Required Authority to Operate (ATO) throughout migration process
  • Congressional oversight and public transparency requirements

Our Solution

EPC Group executed a FedRAMP-aligned migration with enhanced security controls:

1

Phase 1: FedRAMP Authorization

Completed FedRAMP High authorization package and obtained provisional ATO from sponsoring agency.

2

Phase 2: Security Hardening

Implemented enhanced security controls including MFA, DLP policies, and advanced threat protection.

3

Phase 3: Content Assessment

Analyzed 15M documents for metadata quality, security classification, and migration readiness.

4

Phase 4: Phased Migration

Executed division-by-division migrations with security validation and user acceptance testing.

5

Phase 5: ATO Renewal

Renewed Authority to Operate for production environment and decommissioned legacy systems.

Results & Impact

30,000
Users Migrated
All federal employees successfully moved
15M
Documents
Complete content migration
FedRAMP High
Microsoft cloud authorization, not EPC
EPC Group holds no FedRAMP authorization. Office 365 U.S. Government (GCC and GCC High) holds ATOs issued by US agencies (Microsoft Learn, Federal Risk and Authorization Management Program (FedRAMP), accessed 2026-10-21), and Microsoft states Office 365 GCC supports FedRAMP at the High impact level (Microsoft Learn, Office 365 GCC, accessed 2026-10-21); the ATO for this deployment was the agency's own (Phase 5)
35%
Cost Reduction
Annual infrastructure savings
0
Security violations reported
Zero security violations, as reported by EPC Group; no compliance percentage is claimed
ATO
Maintained
Continuous authorization throughout

Quick Facts

Client
U.S. Federal Agency
Industry
Government
Service
Migrations
Duration
14 months
Team Size
18 consultants

Technologies Used

SharePoint OnlineAzure ADMicrosoft DefenderAzure Information ProtectionShareGatePowerShell

Share This Study


Request Full Case Study

Ready to Achieve Similar Results?

Let's discuss how EPC Group can help transform your Migrations environment.

Schedule a Consultation
AI assistant — not a human