Skip to content

Confidential Computing

What is Confidential Computing?

A security paradigm that protects data in use by performing computation in a hardware-based trusted execution environment. Confidential computing prevents unauthorised access to data even from the infrastructure provider.

AI & Technology

Terms that appear alongside confidential computing

Each of these is named in at least one of the same controls as confidential computing. The number is how many controls name both.

Frameworks that govern confidential computing

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on confidential computing

Requirements naming confidential computing across 3 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications2 controls

Security Layer 1 Infrastructure per X.805 Clause 7.1: The Infrastructure Security Layer consists of network facilities (transmission facilities and network elements) protected by the security measures.

X805-Layer1-Infrastructure-Security-Transmission-Facilities-Network-Elements-Lines-Routers-Switches · ITU-T X.805 Security Layer 1 - Infrastructure Security + Transmission Facilities + Network Elements + Routers + Switches + Lines + Physical + Datacenter + Optical + Radio Access + Wireless + Wireline + Edge →
Kuwait National Cybersecurity Framework1 control

Kuwait NCF Protect function (Data). Data Protection and Encryption aligned with NIST SP 800-53 SC family + ISO 27001 A.10 cryptography + A.13 communications security + KDPPR CITRA data protection coordination.

KNCF-Protect-Data-Encryption-Classification-Cryptography-Key-Management-DLP-PKI-Quantum-Resistant · Kuwait NCF Protect + Data + Encryption + Classification + Cryptography + Key Management + DLP →
NIST SP 800-1441 control

Apply Section 7 encryption and key management in cloud including: data at rest (provider-managed encryption + customer-managed encryption keys CMEK + Bring Your Own Key BYOK + Hold Your Own Key HYOK) + data in transit (TLS 1.3 + IPsec + mTLS) + data in use (co...

NISTSP144-4 · Encryption, Key Management, and BYOK →

Questions people ask about confidential computing

What is Confidential Computing?
A security paradigm that protects data in use by performing computation in a hardware-based trusted execution environment. Confidential computing prevents unauthorised access to data even from the infrastructure provider.
Why is Confidential Computing important for compliance?
Confidential Computing is a key concept in AI & Technology. Understanding confidential computing helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Confidential Computing?
Confidential Computing appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, Kuwait National Cybersecurity Framework, NIST SP 800-144. Across these standards we have identified 4 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Confidential Computing?
Explore our compliance framework pages to see how confidential computing applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Confidential Computing applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.