2 of 4 What are you trying to do?Prove : Show an examiner, auditor or inspector what was doneOperate : Have a platform or service run for youReplace : Move work off spreadsheets, paper, email or whiteboardsComply : Support a specific regulation or standard
Which regulation or standard? Any requirement 42 CFR Part 2 (7) ACGME requirements (2) ADA Title II (8) Bank Secrecy Act and anti-money laundering rules (3) CDC National Healthcare Safety Network (NHSN) reporting (2) CFTC recordkeeping rules (3) CJIS Security Policy (3) Classified national security information (EO 13526, 32 CFR Part 2001) (5) CMS Conditions of Participation for hospitals (42 CFR Part 482) (19) CNSSI 1253 (7) Common Rule (45 CFR Part 46) (2) Controlled Unclassified Information (CUI) (4) DISA STIGs (2) DoD Information Security Program (DoDM 5200.01) (5) DoD Instruction 8500.01, Cybersecurity (2) DoD RMF (DoDI 8510.01) (11) E-SIGN Act (4) EMTALA (3) Executive Order 12333 (2) Executive Order 14028 (2) FCA Handbook recording rules (2) FDA 21 CFR Part 11 (3) FDA medical device reporting (21 CFR Part 803) (2) FDA postmarket cybersecurity guidance for medical devices (2) Federal Records Act (3) FedRAMP (2) FFIEC IT Examination Handbook and IT guidance (14) FINRA Rule 2210 (communications with the public) (2) FINRA Rule 3110 (supervision) (5) FIPS 140-3 (2) FISMA (6) Freedom of Information Act (2) GLBA (19) HHS 405(d) Health Industry Cybersecurity Practices (4) HHS Healthcare and Public Health Cybersecurity Performance Goals (2) HIPAA (41) HITECH Act (2) HSPD-12 and FIPS 201 (PIV) (2) ICH E6 Good Clinical Practice (2) IEC 80001-1 (2) Information blocking rule (45 CFR Part 171) (6) Intelligence Community Directive 503 (3) Interagency Guidance on Third-Party Relationships (9) Interagency Guidelines Establishing Information Security Standards (15) ITAR (2) MiFID II recording of communications (Article 16(7)) (2) Model risk management guidance (SR 26-2) (7) NCUA Security Program (12 CFR Part 748) (6) NFPA 99 Health Care Facilities Code (2) NISPOM (32 CFR Part 117) (4) NIST AI Risk Management Framework (2) NIST SP 800-161 supply chain risk management (2) NIST SP 800-37 Risk Management Framework (2) NIST SP 800-53 (11) NIST SP 800-63 Digital Identity Guidelines (3) NIST SP 800-88 media sanitization (2) NYDFS 23 NYCRR Part 500 (15) OFAC sanctions regulations (4) OMB Circular A-130 (2) OSHA Bloodborne Pathogens Standard (2) PCI DSS (6) Privacy Act of 1974 (13) Regulation Z (12 CFR Part 1026) (2) Sarbanes-Oxley Act (4) SEC Marketing Rule (Rule 206(4)-1) (2) SEC Regulation S-P (17 CFR Part 248) (10) SEC Rule 17a-4 and FINRA Rule 4511 (books and records) (5) Section 1557 of the Affordable Care Act (2) Section 508 (6) Section 889 (FY2019 NDAA) (2) State open meetings laws (2) State public records laws (7) TCPA (4) The Joint Commission standards (10) Uniform Electronic Transactions Act (UETA) (2) Uniform Guidance (2 CFR Part 200) (5) WCAG 2.1 (3) Zero trust architecture (2)
4 of 4 Anything it must fit? (optional)
Deployment
Moraph cloud 78 Dedicated environment 68 In your environment 31 Disconnected or classified networks 16 US government cloud 7 With a managed service 58 On a licence you already hold 37
Product type
Moraph-built software 80 Managed platforms 49 Either 129
Must connect to Any system Asset, maintenance and work orders Clinical research systems Cloud, DevOps and infrastructure Communication archiving and surveillance Core banking, lending and payments CRM, websites and public service requests Cross-domain solutions Data warehouses, reporting and analytics Documents, records and e-signature Electronic health records and clinical systems Email, messaging and collaboration Endpoint, network and vulnerability tools Finance, ERP and procurement GIS and mapping Governance, risk and compliance Government registries and regulatory filing Health data exchange, payers and revenue cycle HR, payroll and staffing Identity, directory and single sign-on IT service management and ticketing Keys, certificates and privileged access Laboratory, pharmacy and imaging Learning and training Mobile device management Moraph Work API and other Moraph services Physical security and access control Printing and mail Public safety and justice Sanctions, AML and identity verification Scheduling Security monitoring and SIEM Software supply chain Telephony and contact center Trading, custody and investment data