Data at Rest
What is Data at Rest?
Data that is stored in any digital form on persistent storage media such as hard drives, SSDs, databases, or cloud storage. Encryption of data at rest is a common security requirement across compliance frameworks.
Terms that appear alongside data at rest
Each of these is named in at least one of the same controls as data at rest. The number is how many controls name both.
- encryption 34 shared controls
- key management 12 shared controls
- data at rest encryption 9 shared controls
- integrity 8 shared controls
- fips 7 shared controls
- tls 6 shared controls
- data in transit 6 shared controls
- nist 6 shared controls
Frameworks that govern data at rest
What the standards actually require on data at rest
Requirements naming data at rest across 6 standards, quoted from the control text.
The plan must require that all IAC data at rest is authorised, validated and given confidentiality, integrity and availability protection in line with its classification, and that the risk to stored data that comes from or sits in Baseline Profile zones is ide...
api-1164::PR.DS-1 · PR.DS-1 Data at rest authorised, validated and protected by classification →Use automated controls such as Config remediation, EventBridge actions and SCPs to detect and correct unencrypted or improperly protected data automatically.
SEC08-BP03 · Automate data at rest protection →For selected data categories (ASSET-2c), all data at rest is protected, extending the controls of ARCHITECTURE-5a.
australian-energy-sector-cyber-security-framework-aescsf::ARCHITECTURE-5b · ARCHITECTURE-5b: All data at rest protected for selected categories →Encrypt data at rest using platform-managed or customer-managed keys for all storage services with documented key management.
DP-4 · Enable data at rest encryption by default →Data recorded on non-volatile storage should be encrypted where the classification and risk require, with the point of encryption chosen to protect against the threats in scope (theft of media, unauthorized administrator access, cloud provider access), keys ma...
iso-iec-27040-2024::10.5.5 · Encrypting data at rest →Apply encryption for stored data and data in transit based on a risk assessment of the assets in question.
ASIC-CR-PR-3 · Encryption of data at rest and in transit →Questions people ask about data at rest
What is Data at Rest?
Why is Data at Rest important for compliance?
Which compliance frameworks address Data at Rest?
Where can I learn more about Data at Rest?
See how Data at Rest applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.