NIST 800-171 · 3.13 System and Communications Protection

3.13.11 Employ FIPS-validated cryptography

Employ FIPS-validated cryptography when used to protect the confidentiality of CUI.

Mapped across 15 provisions

Equivalent and related requirements in other frameworks and regulations.

CIS Controls v8EquivalentCurated
3.11 Encrypt sensitive data at rest
Cryptography & data protection
DORAPartialCurated
Art. 9 Protection and prevention
Cryptography & data protection
GDPRPartialCurated
Art. 32 Security of processing
Cryptography & data protection
GLBAEquivalentCurated
§314.4(c)(3) Encryption of customer information
Cryptography & data protection
HIPAAEquivalentCurated
§164.312(e)(1) Transmission security
Cryptography & data protection
ISO 27001EquivalentCurated
A.8.24 Use of cryptography
Cryptography & data protection
LGPDPartialCurated
Art. 46 Security measures
Cryptography & data protection
NIS2EquivalentCurated
Art. 21(2)(h) Cryptography and encryption
Cryptography & data protection
NIST 800-53EquivalentCurated
SC-8 Transmission confidentiality and integrity
Cryptography & data protection
NIST 800-53EquivalentCurated
SC-28 Protection of information at rest
Cryptography & data protection
NIST CSF 2.0EquivalentCurated
PR.DS-01 Confidentiality of data-at-rest protected
Cryptography & data protection
NIST CSF 2.0EquivalentCurated
PR.DS-02 Confidentiality of data-in-transit protected
Cryptography & data protection
PCI DSSEquivalentCurated
Req. 3 Protect stored account data
Cryptography & data protection
PCI DSSEquivalentCurated
Req. 4 Protect cardholder data with strong cryptography during transmission
Cryptography & data protection
SOC 2PartialCurated
CC6.7 Restricting data transmission
Cryptography & data protection