Requirements · Government
NISPOM (32 CFR Part 117)
National Industrial Security Program Operating Manual. 4 Moraph products list it under “Requirements it supports”. The products support this requirement; meeting it remains your organization’s responsibility.
About the rule
What it is
The National Industrial Security Program Operating Manual (NISPOM), codified in 2021 as 32 CFR Part 117, sets the requirements that cleared contractors must meet to protect classified information. It is issued by the Department of Defense under Executive Order 12829, and the Defense Counterintelligence and Security Agency oversees most cleared contractors on the Department’s behalf.
Source: 32 CFR Part 117 (eCFR). This summary is for orientation only; read the rule itself or ask your counsel for what it requires of you.
Citations
How the products cite it
The exact wording on the product pages, with how many products use each.
- 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM) 2 products
- 32 CFR Part 117 (NISPOM), for cleared contractors 1 product
- 32 CFR Part 117 (NISPOM), insider threat program requirements for cleared contractors 1 product
For what it requires of your organization, read the rule itself or ask your counsel.
Products
The 4 products that support it
DoD IL6 "Secret" Cloud Collaboration
Deploying commercial collaboration tools in a classified environment is a massive technical hurdle. We deploy Microsoft 365 in the "Secret" impact level (IL6) cloud, enabling classified email and Teams chat. Moraph provides the "cleared" administrators (US Citizens with clearances) required to manage this environment, helping address the DoD's talent gap; authorization stays with Microsoft for the platform and with your authorizing official for your use.
Lists:
- 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM)
Insider Threat "UBA" (User Behavior Analytics)
The greatest threat often comes from within. This analytics engine monitors user activity on classified networks to detect anomalies—such as a user downloading large files at 3 AM or printing excessive documents—that may indicate espionage or data exfiltration.
Lists:
- 32 CFR Part 117 (NISPOM), insider threat program requirements for cleared contractors
Personnel Security (PerSec) Clearance Tracker
Managing security clearances is a continuous process. This system tracks the lifecycle of clearances (Secret/Top Secret), monitoring re-investigation dates and integrating with "Continuous Evaluation" feeds to flag potential risks (e.g., arrests, financial distress) in real-time.
Lists:
- 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM)
SCIF Access Control & Management System
Sensitive Compartmented Information Facilities (SCIFs) are the physical fortresses of the intelligence community. This facility management tool digitizes physical access logs, manages "Visitor Access Requests" (VARs), and shows Intrusion Detection System (IDS) events as they are received from your alarm system. It replaces paper logs with an append-only digital audit trail that supports the facility management requirements of ICD 705; accreditation decisions remain with the accrediting official.
Lists:
- 32 CFR Part 117 (NISPOM), for cleared contractors
Not sure which requirements apply to you? Request a gap analysis. All requirements: Requirements our products support.