Skip to content

TLS

What is TLS?

Transport Layer Security, a cryptographic protocol that provides end-to-end encryption for data transmitted over networks, succeeding SSL.

Information Security

Terms that appear alongside tls

Each of these is named in at least one of the same controls as tls. The number is how many controls name both.

Frameworks that govern tls

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on tls

Requirements naming tls across 6 standards, quoted from the control text.

3GPP 5G Security Architecture (TS 33.501)4 controls

5G SBI between Network Functions must be protected using TLS 1.2 or higher with mutual authentication via certificates. Direct communication may use OAuth 2.0 for service authorization.

33.501-13.1 · Service-Based Architecture Security (TLS) →
Australian Information Security Manual4 controls

When using DH or ECDH for key establishment of TLS connections, the ephemeral variant is used.

ISM-1448 · When using DH or ECDH for key establishment of TLS connections, the ephemeral variant is u →
HL7 FHIR Security Framework2 controls

HL7 FHIR Transport Security. TRANSPORT LAYER SECURITY (TLS) - all FHIR APIs MUST use TLS 1.2+ for production + TLS 1.3 recommended; certificate validation + trust chain + certificate pinning where appropriate + HSTS + secure session establishment + cipher suit...

HL7-FHIR-Transport-TLS-Communication · HL7 FHIR Transport Security - TLS 1.2+, Communication Security, Time Keeping, Server CapabilityStatement →
ISMAP (Japan)2 controls

ISMAP Data Protection establishes comprehensive data lifecycle controls. (1) Data Classification: customer government data must be classified per Japanese government data classification scheme + including (a) General + (b) Sensitive + (c) Confidential + (d) St...

ISMAP-DataProtection-Classification-Encryption-DataResidencyJapan-Backup-SecureDeletion-Cryptography-FIPS · ISMAP Data Protection - Data Classification + AES-256 Encryption At Rest + TLS 1.3 In Transit + Data Residency Japan + Backup + Secure Deletion + Cryptography per FIPS 140-3 + CRYPTREC + KMS HSM →
O-RAN WG11 Security Specification2 controls

Implement cryptography + protocol security + PKI per O-RAN WG11 Security Requirements covering TLS + SSH + IPsec + certificate lifecycle.

ORANWG11-3 · Cryptography, TLS, SSH, IPsec, and PKI Lifecycle Management →
ASD Strategies to Mitigate Cyber Security Incidents1 control

TLS encryption between email servers to protect the confidentiality of emails in transit between organisations.

ASD37-17 · TLS encryption between email servers (Limited) →

Questions people ask about tls

What is TLS?
Transport Layer Security, a cryptographic protocol that provides end-to-end encryption for data transmitted over networks, succeeding SSL.
Why is TLS important for compliance?
TLS is a key concept in Information Security. Understanding tls helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address TLS?
TLS appears in the requirement text of 3GPP 5G Security Architecture (TS 33.501), Australian Information Security Manual, HL7 FHIR Security Framework, ISMAP (Japan), O-RAN WG11 Security Specification. Across these standards we have identified 15 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about TLS?
Explore our compliance framework pages to see how tls applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how TLS applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.