Requirements · Government

FedRAMP

Federal Risk and Authorization Management Program. 2 Moraph products list it under “Requirements it supports”. The products support this requirement; meeting it remains your organization’s responsibility.

About the rule

What it is

The Federal Risk and Authorization Management Program (FedRAMP) is the US government’s program for the security assessment of cloud products and services used by federal agencies. It was established by the Office of Management and Budget in 2011, written into law by the FedRAMP Authorization Act of 2022 and is run by the General Services Administration. Its requirements are based on NIST SP 800-53, and the program is changing its process and terms under FedRAMP 20x, so check fedramp.gov for the current rules.

Source: FedRAMP.gov. FedRAMP in the glossary. This summary is for orientation only; read the rule itself or ask your counsel for what it requires of you.

Moraph’s Trust Center lists “FedRAMP High” among the frameworks its controls are mapped to: “Managed landing zones and products configured against the FedRAMP High baseline (NIST SP 800-53).” It also states: “Moraph does not hold a certification or authorization for any framework in this list; where a client needs its own authorization or examination, we provide the control mapping and evidence to support it.”

Citations

How the products cite it

The exact wording on the product pages, with how many products use each.

  • FedRAMP Authorization Act (44 U.S.C. 3607 to 3616) 1 product
  • FedRAMP Authorization Act (44 U.S.C. 3607-3616) 1 product

For what it requires of your organization, read the rule itself or ask your counsel. FedRAMP in the glossary.

Products

The 2 products that support it

  • GovernmentFederal CivilianMoraph SaaS

    FedRAMP ATO Accelerator

    Achieving FedRAMP authorization is a document-heavy process that can take years. This "Governance-as-Code" platform drafts the System Security Plan (SSP) and control documentation from the actual configuration of the software, for your compliance team to review. It is designed to shorten the "paperwork" phase of authorization; authorization decisions, the independent assessment and review timelines are outside Moraph's control.

    Lists:

    • FedRAMP Authorization Act (44 U.S.C. 3607-3616)
    Product details and demo
  • GovernmentFederal CivilianManaged platform

    FedRAMP High Managed Landing Zone

    Cloud adoption is hindered by the complexity of configuring secure environments. We provide a pre-configured cloud "Landing Zone" configured against the FedRAMP High baseline, documenting which security controls applications can inherit. Moraph maintains the boundary protection and patches shared components; your authorizing official decides what operates, and application teams keep the controls assigned to them.

    Lists:

    • FedRAMP Authorization Act (44 U.S.C. 3607 to 3616)
    Product details and demo

Not sure which requirements apply to you? Request a gap analysis. All requirements: Requirements our products support.

More government requirements