Solutions catalog · Buyer role
Solutions for risk managers
22 solutions whose product pages name risk managers among the people they are for.
Not sure where to start? Answer four questions in the guided finder
AML & SAR Automation Hub
Rules-based detection of structuring and layering, with FinCEN Suspicious Activity Report (SAR) drafts pre-filled for BSA officers to review and file.
6 requirements · 8 integrations · 3 ways to deploy
Business Continuity Planning
Managing disaster recovery plans and automated testing logs for examiners.
6 requirements · 7 integrations · 3 ways to deploy
CRM for Finance
Managed Salesforce Shield encryption with key material held by Moraph outside Salesforce, so Salesforce does not store your decryption keys. Field permissions remain your decision.
6 requirements · 7 integrations · 3 ways to deploy
Crypto-Asset Custody Bridge
A control layer allowing banks to hold digital assets via sub-custodians while maintaining the legal ledger of record. Permission to offer custody is for the bank and its regulators.
6 requirements · 7 integrations · 3 ways to deploy
Endpoint Detection & Response
24/7 managed detection and hunting on teller workstations to reduce ransomware risk. Recovery, backups and notification decisions remain your institution's.
6 requirements · 7 integrations · 3 ways to deploy
Food Safety Inspection Router
The USDA needs to optimize the deployment of inspectors to food processing facilities. This app scores facilities by risk from past violations and the signals your staff record, with weights your program sets, and proposes inspection routes for supervisors to approve; without a connection, inspectors work from a printed field sheet and enter results later.
6 requirements · 7 integrations · 3 ways to deploy
Identity Access Management
MFA and SSO configurations tuned to support the FFIEC Authentication and Access guidance (2021). Your institution owns the risk assessment and the adequacy decision.
6 requirements · 7 integrations · 3 ways to deploy
IFRS 9 / CECL Impairment Calculator
Estimates "Expected Credit Loss" under CECL and IFRS 9 from your own loss and vintage history and the economic scenarios you approve. The allowance recorded remains your institution's judgment.
6 requirements · 8 integrations · 3 ways to deploy
Implant & Tissue Compliance Tracker
Barcode tracking of implants and tissue from receipt to patient, with expiry warnings and the recall notices your team records matched to stock and recipients. Use and reporting decisions remain your staff's.
6 requirements · 7 integrations · 3 ways to deploy
Medical Device Cybersecurity Hub
Inventory of IoMT (Internet of Medical Things) devices, tracking patch status and vulnerabilities.
6 requirements · 7 integrations · 3 ways to deploy
Model Risk Management (MRM) Validator
Records the validation and monitoring tests run on AI and credit scoring models in support of SR 26-2 model risk guidance (which replaced SR 11-7), rating each result against your thresholds and documenting model drift and bias. Validation conclusions remain your validators' to reach.
6 requirements · 7 integrations · 3 ways to deploy
Patient Safety & Incident Reporting
"Near miss" reporting portal with root-cause analysis workflows, structured to align with AHRQ Common Formats for PSO submission. Event classification and reporting remain your organization's.
6 requirements · 7 integrations · 3 ways to deploy
Policy Management
Central repository for hospital policies and procedure attestation.
6 requirements · 6 integrations · 3 ways to deploy
Privileged Access Management
Vaulting and rotating passwords for core banking admin accounts.
6 requirements · 7 integrations · 3 ways to deploy
Public Cloud Infrastructure
Managing the tenant with "Policy as Code" guardrails designed to block public S3 buckets holding consumer data. Guardrails reduce, not remove, misconfiguration risk; data decisions remain yours.
6 requirements · 7 integrations · 4 ways to deploy
Security Awareness Training
Phishing simulations tailored to financial fraud (e.g., "Wire Transfer Request"), producing training evidence for examiners and cyber insurers. Premium decisions remain the insurer's.
6 requirements · 6 integrations · 3 ways to deploy
Spreadsheet Risk Control
Auditing critical Excel models (EUCs) for formula errors and unauthorized changes.
6 requirements · 7 integrations · 3 ways to deploy
Stress Testing & Capital Planning (DFAST)
Runs "what-if" economic scenarios (e.g., "Unemployment up 5%") to project capital ratios. Capital decisions remain with management and the board.
6 requirements · 7 integrations · 3 ways to deploy
Supply Chain Mapping & Risk Illuminator
Federal agencies must understand their reliance on foreign suppliers. This tool maps multi-tier supply chains from the supplier data your staff record or load, and shows critical dependencies on single sources and on the countries or regions your program designates, supporting the implementation of "Buy American" and supply chain security mandates.
6 requirements · 7 integrations · 3 ways to deploy
Third-Party Risk Scoring
Continuous credit-rating-style monitoring of vendor security postures.
6 requirements · 6 integrations · 3 ways to deploy
Vendor Risk Management (VRM)
Centralized repository for tracking third-party SOC 2 reports and insurance certificates, organizing vendor due diligence with upload links and renewal tasks.
5 requirements · 7 integrations · 3 ways to deploy
Vulnerability Management
Authenticated scanning of the banking network on your schedule (e.g., weekly), supporting the GLBA Safeguards Rule's vulnerability-assessment requirement (16 CFR 314.4(d)(2)). Risk assessment and remediation remain the institution's.
6 requirements · 7 integrations · 3 ways to deploy
Not sure which of these fit? Use the guided finder, browse by requirement or request a gap analysis.