Requirements · Security & privacy
NIST SP 800-37 Risk Management Framework
2 Moraph products list it under “Requirements it supports”. The products support this requirement; meeting it remains your organization’s responsibility.
About the rule
What it is
NIST Special Publication 800-37, Risk Management Framework for Information Systems and Organizations, describes the Risk Management Framework’s seven steps: prepare, categorize, select, implement, assess, authorize and monitor. Federal agencies apply it under OMB Circular A-130, and the Department of Defense applies it through DoD Instruction 8510.01.
Source: NIST SP 800-37 Rev. 2 (NIST CSRC). This summary is for orientation only; read the rule itself or ask your counsel for what it requires of you.
Citations
How the products cite it
The exact wording on the product pages, with how many products use each.
- NIST SP 800-37 Rev. 2, Risk Management Framework 2 products
For what it requires of your organization, read the rule itself or ask your counsel.
Products
The 2 products that support it
FedRAMP ATO Accelerator
Achieving FedRAMP authorization is a document-heavy process that can take years. This "Governance-as-Code" platform drafts the System Security Plan (SSP) and control documentation from the actual configuration of the software, for your compliance team to review. It is designed to shorten the "paperwork" phase of authorization; authorization decisions, the independent assessment and review timelines are outside Moraph's control.
Lists:
- NIST SP 800-37 Rev. 2, Risk Management Framework
FedRAMP High Managed Landing Zone
Cloud adoption is hindered by the complexity of configuring secure environments. We provide a pre-configured cloud "Landing Zone" configured against the FedRAMP High baseline, documenting which security controls applications can inherit. Moraph maintains the boundary protection and patches shared components; your authorizing official decides what operates, and application teams keep the controls assigned to them.
Lists:
- NIST SP 800-37 Rev. 2, Risk Management Framework
Not sure which requirements apply to you? Request a gap analysis. All requirements: Requirements our products support.