Requirements · Government

Executive Order 14028

Improving the Nation’s Cybersecurity. 2 Moraph products list it under “Requirements it supports”. The products support this requirement; meeting it remains your organization’s responsibility.

About the rule

What it is

Executive Order 14028, Improving the Nation’s Cybersecurity, was signed in May 2021. It directed federal agencies to modernize their cybersecurity, including moving toward zero trust architecture, adopting multi-factor authentication and encryption, improving the security of the software they buy and standardizing how they respond to incidents.

Source: Federal Register: Executive Order 14028. This summary is for orientation only; read the rule itself or ask your counsel for what it requires of you.

Citations

How the products cite it

The exact wording on the product pages, with how many products use each.

  • Executive Order 14028, Improving the Nation's Cybersecurity 2 products

For what it requires of your organization, read the rule itself or ask your counsel.

Products

The 2 products that support it

  • GovernmentDefense & IntelligenceMoraph SaaS

    Software Bill of Materials (SBOM) Watchtower

    The defense supply chain is vulnerable to software supply chain attacks. This platform checks software entering the DoD environment at the point of intake, decomposing binaries to find "nested dependencies" (like Log4j) and holding packages that break your supplier and provenance policies for a decision, helping protect the integrity of mission systems. Binary analysis cannot identify every component, and admission decisions remain with your designated approvers.

    Lists:

    • Executive Order 14028, Improving the Nation's Cybersecurity
    Product details and demo
  • GovernmentDefense & IntelligenceManaged platform

    Zero Trust "Black Cloud" Overlay

    Defense assets must be hidden from the public internet. This overlay network utilizes a Software Defined Perimeter so critical applications make only outbound connections and expose no inbound ports or public IP addresses, keeping them hidden from attackers on the transport network. Hiding an application does not fix vulnerabilities in it; patching and access policy remain with your organization.

    Lists:

    • Executive Order 14028, Improving the Nation's Cybersecurity
    Product details and demo

Not sure which requirements apply to you? Request a gap analysis. All requirements: Requirements our products support.

More government requirements