Requirements · Government
FISMA
Federal Information Security Modernization Act of 2014. 6 Moraph products list it under “Requirements it supports”. The products support this requirement; meeting it remains your organization’s responsibility.
About the rule
What it is
The Federal Information Security Modernization Act of 2014 (FISMA) requires each federal agency to develop, document and run an information security program for the information and systems that support it, including those provided or managed by contractors and other agencies. The Office of Management and Budget oversees agencies’ programs, the Cybersecurity and Infrastructure Security Agency (CISA) helps agencies put them into practice, and NIST develops the standards and guidelines they follow.
Source: CISA: Federal Information Security Modernization Act. FISMA in the glossary. This summary is for orientation only; read the rule itself or ask your counsel for what it requires of you.
Citations
How the products cite it
The exact wording on the product pages, with how many products use each.
- Federal Information Security Modernization Act (44 U.S.C. 3551 et seq.) 2 products
- Federal Information Security Modernization Act of 2014 (44 U.S.C. 3551 et seq.) 2 products
- Federal Information Security Modernization Act of 2014 (FISMA) 2 products
For what it requires of your organization, read the rule itself or ask your counsel. FISMA in the glossary.
Products
The 6 products that support it
Census Field Logic & Enumeration App
For the Census Bureau, accurate data collection is paramount. This application manages the workforce of field enumerators, proposing their routes and providing a secure interface for collecting demographic data on mobile devices, with data quality checks and protection of respondent data on the device and in transit. Methodology and operational decisions remain the agency's.
Lists:
- Federal Information Security Modernization Act (44 U.S.C. 3551 et seq.)
FedRAMP ATO Accelerator
Achieving FedRAMP authorization is a document-heavy process that can take years. This "Governance-as-Code" platform drafts the System Security Plan (SSP) and control documentation from the actual configuration of the software, for your compliance team to review. It is designed to shorten the "paperwork" phase of authorization; authorization decisions, the independent assessment and review timelines are outside Moraph's control.
Lists:
- Federal Information Security Modernization Act of 2014 (44 U.S.C. 3551 et seq.)
FedRAMP High Managed Landing Zone
Cloud adoption is hindered by the complexity of configuring secure environments. We provide a pre-configured cloud "Landing Zone" configured against the FedRAMP High baseline, documenting which security controls applications can inherit. Moraph maintains the boundary protection and patches shared components; your authorizing official decides what operates, and application teams keep the controls assigned to them.
Lists:
- Federal Information Security Modernization Act of 2014 (44 U.S.C. 3551 et seq.)
Food Safety Inspection Router
The USDA needs to optimize the deployment of inspectors to food processing facilities. This mobile-first app uses predictive analytics to route inspectors to high-risk facilities based on past violations and real-time data, while allowing for offline data entry in rural areas with poor connectivity.
Lists:
- Federal Information Security Modernization Act (44 U.S.C. 3551 et seq.)
ServiceNow for Federal Service Management
We deploy a specialized implementation of ServiceNow pre-configured with federal workflows (e.g., PIV card resets, SIPRNet token issuance). This modernizes the federal IT helpdesk experience, replacing legacy ticketing systems with a unified service portal.
Lists:
- Federal Information Security Modernization Act of 2014 (FISMA)
Tax Code "Rule-as-Code" Engine
For the IRS, translating tax law into software code is a manual, error-prone process. This engine allows policy experts to draft tax rules in a machine-readable format that can be directly consumed by tax processing systems, reducing the gap between legislation and implementation.
Lists:
- Federal Information Security Modernization Act of 2014 (FISMA)
Not sure which requirements apply to you? Request a gap analysis. All requirements: Requirements our products support.