Requirements · Security & privacy
Zero trust architecture
NIST SP 800-207, OMB M-22-09 and the DoD Zero Trust Strategy. 2 Moraph products list it under “Requirements it supports”. The products support this requirement; meeting it remains your organization’s responsibility.
About the rule
What it is
Zero trust is a security model in which no user, device or network location is trusted by default, and every request for access is checked. NIST SP 800-207 (2020) defines zero trust architecture, OMB Memorandum M-22-09 (January 2022) set the federal government’s zero trust strategy, and the Department of Defense published its own Zero Trust Strategy in November 2022.
Source: NIST SP 800-207 (NIST CSRC). Zero trust in the glossary. This summary is for orientation only; read the rule itself or ask your counsel for what it requires of you.
Citations
How the products cite it
The exact wording on the product pages, with how many products use each.
- DoD Zero Trust Strategy and Zero Trust Reference Architecture 1 product
- NIST SP 800-207 Zero Trust Architecture 1 product
- NIST SP 800-207, Zero Trust Architecture 1 product
- OMB Memorandum M-22-09, Moving the U.S. Government Toward Zero Trust Cybersecurity Principles 1 product
For what it requires of your organization, read the rule itself or ask your counsel. Zero trust in the glossary.
Products
The 2 products that support it
Zero Trust "Black Cloud" Overlay
Defense assets must be hidden from the public internet. This overlay network utilizes a Software Defined Perimeter so critical applications make only outbound connections and expose no inbound ports or public IP addresses, keeping them hidden from attackers on the transport network. Hiding an application does not fix vulnerabilities in it; patching and access policy remain with your organization.
Lists:
- OMB Memorandum M-22-09, Moving the U.S. Government Toward Zero Trust Cybersecurity Principles
- DoD Zero Trust Strategy and Zero Trust Reference Architecture
- NIST SP 800-207, Zero Trust Architecture
Network Access Control
Quarantining unknown medical devices that plug into hospital wall jacks.
Lists:
- NIST SP 800-207 Zero Trust Architecture
Not sure which requirements apply to you? Request a gap analysis. All requirements: Requirements our products support.