Skip to content

SCIF Access Control & Management System

Defense and intelligence mission systems (unclassified overview)

Learn how Moraph's eleven defense and intelligence products record, check and route security work, and where every decision stays with your officers and your authority.

Practitioner2 hr 47 min14 lessonsFor Users, AdministratorsCertificate of completion

About this course

Moraph offers eleven products for defense and intelligence organizations: facility access, software supply chain checks, cross-domain transfer, munitions accountability, personnel security, insider threat analytics, key management, edge compute, offline mission planning, UAV maintenance and foreign disclosure. They solve different problems, but they share a design: records move through stages, the person who prepares something is never the person who approves it, and nothing in the record can be edited after the fact.

This course is an unclassified overview. Every example uses fictional organizations and data, such as Example Air Wing and Person 4471. Where the products run on classified networks, they are installed in your environment and operated under your organization's authority and procedures, not Moraph's, so the course teaches the product behavior and leaves the classified handling to your own security office.

What you’ll be able to do

  • Explain the deployment options for the defense and intelligence products and why operation on classified networks happens under your organization's authority
  • Describe the shared controls the products use, such as append-only records, two-person rules and scoped, time-limited auditor access
  • Work the everyday records in facility access, personnel security, insider threat and foreign disclosure, and name the decisions that stay with your officers
  • Follow a software package, a cross-domain transfer and an item of keying material through their stages and evidence
  • Use the accountability, edge compute, offline planning and UAV maintenance products the way they are designed, including while disconnected
  • Recognize what each product does not do, such as accrediting facilities, adjudicating clearances or deciding releases

Skills you’ll gain

  • Facility and personnel security records
  • Software supply chain intake
  • Cross-domain transfer review
  • COMSEC and munitions accountability
  • Disconnected and edge operations
  • Separation of duties and audit evidence

Before you start

  • You have completed Security, privacy and compliance with Moraph, or you know how Moraph handles security and compliance in general
  • You work in, or support, a security, operations, logistics or IT function at a defense or intelligence organization or a cleared contractor
  • You know your own organization's procedures for the areas you work in
  • Recommended first: Security, privacy and compliance with Moraph

Syllabus

3 modules · 9 readings · 1 practical exercise · 4 assessments

  1. Module 1Shared ground, facilities and people

    1. Reading: Working under your authorityReading · 10 min
    2. Reading: Facility access and personnel securityReading · 13 min
    3. Reading: Insider threat analytics and foreign disclosureReading · 13 min
    4. Assessment: Module 1 knowledge checkAssessment · 8 min
  2. Module 2Software, transfers and keys

    1. Reading: Checking software with SBOM WatchtowerReading · 12 min
    2. Reading: Moving files with the CDS Transfer AgentReading · 12 min
    3. Reading: Accounting for keying material with CKMSReading · 12 min
    4. Practical exercise: Practical: review a held packagePractical exercise · 15 min
    5. Assessment: Module 2 knowledge checkAssessment · 8 min
  3. Module 3Field operations and accountability

    1. Reading: The Munitions Accountability & Audit LedgerReading · 12 min
    2. Reading: Edge nodes and offline mission planningReading · 13 min
    3. Reading: UAV flight logs and maintenanceReading · 11 min
    4. Assessment: Module 3 knowledge checkAssessment · 8 min
    5. Assessment: Final assessmentAssessment · 20 min

What completion gives you

Complete every lesson and pass each assessment to complete the course. You then get a completion record in My learning, and a certificate of completion you can print or share, with a code anyone can check at academy.moraph.com/verify.

Completion is not certification

Course completion records and certificates of completion show that a person completed a Moraph Academy course. They are not a Moraph certification (which needs the certification exam), a professional license or an accreditation, and they do not authorize anyone to configure, operate, resell or support Moraph products on Moraph’s or anyone else’s behalf.

Course updates

  • Version 1 · · First version.