Skip to content

Encryption

What is Encryption?

The process of converting data into a coded format to prevent unauthorised access. Includes encryption at rest (stored data) and encryption in transit (data being transmitted).

Information Security

What the standards actually require on encryption

Requirements naming encryption across 6 standards, quoted from the control text.

Devices holding certificates for wireless network access should protect those certificates by using full disk encryption.

new-zealand-information-security-manual-nzism::18.2.11.C.05 · 18.2.11.C.05 Full disk encryption protecting stored device certificates →

An ASD-Approved Cryptographic Algorithm (AACA) or high assurance cryptographic algorithm is used when encrypting media.

ISM-1080 · Approved algorithms for media encryption →

For encryption software the export is an actual shipment, transfer or transmission out of the United States or a transfer in the United States to a foreign embassy or affiliate;

ear-export-administration-regulations::734.17 · 734.17 Export of encryption source code and object code software →

The organization should decide, from the risk assessment and the data classification, which storage is encrypted and where (host, network, controller, device, self-encrypting drives, application), and implement it with appropriate algorithms and security stren...

iso-iec-27040-2024::10.5.3 · Encryption of storage →

Encrypt storage on managed endpoint devices so data on a lost or stolen device is not disclosed.

CCM-UEM-08 · Storage Encryption →

Management implements encryption of a type and strength commensurate with the sensitivity of the information for communications and storage, particularly credentials and sensitive transmissions, reviews the methods periodically as technology and threats evolve...

ffiec-it-examination-handbook::IS-II.C.19 · II.C.19 Encryption (Information Security) →

Questions people ask about encryption

What is Encryption?
The process of converting data into a coded format to prevent unauthorised access. Includes encryption at rest (stored data) and encryption in transit (data being transmitted).
Why is Encryption important for compliance?
Encryption is a key concept in Information Security. Understanding encryption helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
What concepts are related to Encryption?
Key concepts related to Encryption include Confidentiality. Understanding these interconnected concepts provides a more comprehensive view of Information Security requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address Encryption?
Encryption appears in the requirement text of New Zealand Information Security Manual (NZISM), Australian Information Security Manual, EAR - Export Administration Regulations, ISO/IEC 27040:2024, Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1. Across these standards we have identified 110 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Encryption?
Explore our compliance framework pages to see how encryption applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Encryption applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.