Skip to main content

💼 CC6.1-10 Uses Encryption to Protect Data

  • ID: /frameworks/soc-2/cc6/01/10

Description​

The entity uses encryption to supplement other measures used to protect data-at-rest, when such protections are deemed appropriate based on assessed risk.

Similar​

  • Internal
    • ID: dec-c-46748ea9

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (11)​

PolicyLogic CountFlagsCompliance
🛡️ AWS Account EBS Volume Encryption Attribute is not enabled in all regions🟢1🟢 x6no data
🛡️ AWS EFS File System encryption is not enabled🟢1🟢 x6no data
🛡️ AWS KMS Symmetric CMK Rotation is not enabled🟢1🟢 x6no data
🛡️ AWS RDS Instance Encryption is not enabled🟢1🟢 x6no data
🛡️ Azure Unattached Managed Disk is not encrypted with Customer-managed key🟢1🟢 x6no data
🛡️ Azure Virtual Machine OS and Data disks are not encrypted with Customer-managed key🟢1🟢 x6no data
🛡️ Google BigQuery Dataset is not encrypted with Customer-Managed Encryption Key (CMEK)🟢1🟢 x6no data
🛡️ Google BigQuery Table is not encrypted with Customer-Managed Encryption Key (CMEK)🟢1🟢 x6no data
🛡️ Google Dataproc Cluster is not encrypted using Customer-Managed Encryption Key🟢1🟢 x6no data
🛡️ Google GCE Disk for critical VMs is not encrypted with Customer-Supplied Encryption Key (CSEK)🟢1🟢 x6no data
🛡️ Google GCE Instance Confidential Compute is not enabled🟢1🟢 x6no data

Internal Rules​

RulePoliciesFlags
✉️ dec-x-0bdcd2761
✉️ dec-x-4d6fee7a1
✉️ dec-x-6ba5ecd21
✉️ dec-x-9cdb74071
✉️ dec-x-966d31831
✉️ dec-x-f63fd4f01