MS alone does not do the job needed to comply with all Cyber Security policies in Fed, DOD, Industry, or globally. Defense in Depth with supporting compliance products is one aspect but unified policy on configurations, std compliance products are basics to support global interoperability and security controls. It's a beast beyond your own house.