Control Objectives: Encryption

Data should be adequately protected when stored. Beyond appropriate access control, an additional control is to store the data in encrypted form (Encryption at Rest) to protect against unauthorized access and/or modification. There are several options for encrypting data at rest and choosing the rig

Protects data if communications are intercepted while data moves between two endpoints (e.g. clients, systems, service). This protection is achieved by encrypting the data before transmission, authenticating the endpoints, and decrypting and verifying the data on arrival.