We're a UK aerospace components manufacturer setting up a US site. I've seen US operations kept separate from overseas systems, but I don't know what drove that design.
Should we plan for a separate Microsoft 365 tenant and US ERP, or could the site use our UK systems? What expertise should we look for before making those decisions?
Start with US export control counsel and your compliance team, then bring IT into the design. They need to identify what products, technical data and contracts are involved, who can access that information, and whether access from the UK or by particular individuals is restricted.
That gives you a basis for deciding where systems live and who administers them. A US location alone doesn't answer all those questions. Ask counsel to work with someone who understands the technical controls as well as the legal requirements.
A separate Microsoft 365 tenant can make sense if the US site will handle data that needs tightly controlled access. It gives you a clearer boundary for identities, administration and collaboration, though it also adds overhead and doesn't automatically make the setup compliant.
Don't order a separate tenant just because the business makes aerospace parts. Work out the data and access requirements first, including how UK staff and suppliers would collaborate with the US team.
For ERP, map the actual information flows before deciding whether to replicate it. Which records would US users view or create in the UK system? Would drawings, manufacturing instructions or other controlled technical data be attached? Who would administer and support it from each country?
If those flows aren't permitted, a US instance or another separated arrangement may be necessary. If they are permitted, you can assess the connectivity and operational needs without assuming a second ERP is required.
Get sales, engineering and operations involved early. They can help identify whether prospective contracts involve controlled unclassified information or specific security requirements, including CMMC. Those requirements depend on the work and contracts, not simply on being an aerospace manufacturer.
When choosing an adviser, ask for export control and defense contracting experience relevant to the planned work, plus the ability to translate the requirements into an IT design. It may take more than one specialist.
unicycle tyre pressure:
That gives us a useful starting point for the discussions with the teams defining the US work.
Answers are reviewed before publication.
spindle_47+stationary:
That separation could explain the setup you saw before. ITAR restrictions are one possible reason, but the actual contracts and data would determine what controls were needed.