Detections
Analytics
800-53|SC-28(1)
Title
CRYPTOGRAPHIC PROTECTIONDescription
The information system implements cryptographic mechanisms to prevent unauthorized disclosure and modification of [Assignment: organization-defined information] on [Assignment: organization-defined information system components].Supplemental
Selection of cryptographic mechanisms is based on the need to protect the confidentiality and integrity of organizational information. The strength of mechanism is commensurate with the security category and/or classification of the information. This control enhancement applies to significant concentrations of digital media in organizational areas designated for media storage and also to limited quantities of media generally associated with information system components in operational environments (e.g., portable storage devices, mobile devices). Organizations have the flexibility to either encrypt all information on storage devices (i.e., full disk encryption) or encrypt specific data structures (e.g., files, records, or fields). Organizations employing cryptographic mechanisms to protect information at rest also consider cryptographic key management solutions.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: AC-19,SC-12
Category: SYSTEM AND COMMUNICATIONS PROTECTION
Parent Title: PROTECTION OF INFORMATION AT REST
Family: SYSTEM AND COMMUNICATIONS PROTECTION
Audit Items
View all Reference Audit Items