Skip to main content

💼 SC-28 PROTECTION OF INFORMATION AT REST

  • ID: /frameworks/nist-sp-800-53-r4/sc/28

Stats​

not available

Description​

The information system protects the [Selection (one or more): confidentiality; integrity] of [Assignment: organization-defined information at rest].

Similar​

  • Internal
    • ID: dec-c-12ff3f46

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST CSF v1.1 → 💼 PR.DS-1: Data-at-rest is protected1631no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 SC-28 (1) CRYPTOGRAPHIC PROTECTIONno data
💼 SC-28 (2) OFF-LINE STORAGEno data

Policies (4)​

PolicyLogic CountFlagsCompliance
🛡️ AWS EFS File System encryption is not enabled🟢1🟢 x6no data
🛡️ AWS RDS Instance Encryption is not enabled🟢1🟢 x6no data
🛡️ Azure MySQL Flexible Server require_secure_transport Parameter is not set to ON🟢1🟢 x6no data
🛡️ Google Cloud SQL Instance SSL Connections are not enforced🟢1🟢 x6no data

Internal Rules​

RulePoliciesFlags
✉️ dec-x-6ba5ecd21
✉️ dec-x-14f5fc251
✉️ dec-x-966d31831
✉️ dec-x-d75986a31