cry-05-encryptingdataatrest.md

SCF - CRY-05 - Encrypting Data At Rest

Cryptographic mechanisms exist to prevent unauthorized disclosure of data at rest.

Mapped framework controls

GDPR

• Art 5.1

ISO 27002

• A.8.24

NIST 800-53

• SC-13
• SC-28

SOC 2

• CC6.1
• CC6.7

Control questions

Are cryptographic mechanisms utilized to prevent unauthorized disclosure of data at rest?