3.11 Encrypt sensitive data at rest

Mapped across 15 provisions

Equivalent and related requirements in other frameworks and regulations.

• ISO 27001EquivalentOfficial mapping

  Source: CIS Controls v8 / ISO/IEC 27001

  A.8.24 Use of cryptography

  Cryptography & data protection

• NIST CSF 2.0EquivalentOfficial mapping

  Source: CIS Controls v8 / NIST CSF 2.0

  PR.DS-01 Confidentiality of data-at-rest protected

  Cryptography & data protection

• DORAPartialCurated
  Art. 9 Protection and prevention

  Cryptography & data protection

• GDPRPartialCurated
  Art. 32 Security of processing

  Cryptography & data protection

• GLBAEquivalentCurated
  §314.4(c)(3) Encryption of customer information

  Cryptography & data protection

• HIPAAEquivalentCurated
  §164.312(e)(1) Transmission security

  Cryptography & data protection

• LGPDPartialCurated
  Art. 46 Security measures

  Cryptography & data protection

• NIS2EquivalentCurated
  Art. 21(2)(h) Cryptography and encryption

  Cryptography & data protection

• NIST 800-171EquivalentCurated
  3.13.11 Employ FIPS-validated cryptography

  Cryptography & data protection

• NIST 800-53EquivalentCurated
  SC-8 Transmission confidentiality and integrity

  Cryptography & data protection

• NIST 800-53EquivalentCurated
  SC-28 Protection of information at rest

  Cryptography & data protection

• NIST CSF 2.0EquivalentCurated
  PR.DS-02 Confidentiality of data-in-transit protected

  Cryptography & data protection

• PCI DSSEquivalentCurated
  Req. 3 Protect stored account data

  Cryptography & data protection

• PCI DSSEquivalentCurated
  Req. 4 Protect cardholder data with strong cryptography during transmission

  Cryptography & data protection

• SOC 2PartialCurated
  CC6.7 Restricting data transmission

  Cryptography & data protection