πΌ CC6.7-2 Uses Encryption Technologies or Secure Communication Channels to Protect Data
- Contextual name: πΌ CC6.7-2 Uses Encryption Technologies or Secure Communication Channels to Protect Data
- ID:
/frameworks/soc-2/cc6/07/02
- Located in: πΌ CC6.7 The entity restricts the transmission, movement, and removal of information to authorized internal and external users and processes, and protects it during transmission, movement, or removal to meet the entity's objectives.
Descriptionβ
Encryption technologies or secured communication channels are used to protect transmission of data and other communications beyond connectivity access points.
Similarβ
- Internal
- ID:
dec-c-dd5610d0
- ID:
Sub Sectionsβ
Section | Sub Sections | Internal Rules | Policies | Flags |
---|
Policies (8)β
Policy | Logic Count | Flags |
---|---|---|
π AWS CloudFront Web Distribution Cache Behaviors allow unencrypted traffic π’ | 1 | π’ x6 |
π AWS CloudFront Web Distribution does not encrypt traffic to Custom Origins π’ | 1 | π’ x6 |
π AWS CloudFront Web Distribution uses outdated SSL protocols with Custom Origins π’ | 1 | π’ x6 |
π Azure MySQL Flexible Server require_secure_transport Parameter is not set to ON π’ | 1 | π’ x6 |
π Azure PostgreSQL Flexible Server require_secure_transport Parameter is not set to ON π’ | 1 | π’ x6 |
π Azure PostgreSQL Single Server Enforce SSL Connection is not set enabled π’ | 1 | π’ x6 |
π Azure Storage Account Secure Transfer Required is not enabled π’ | 1 | π’ x6 |
π Google GCE Instance Block Project-Wide SSH Keys is not enabled π’ | 1 | π’ x6 |
Internal Rulesβ
Rule | Policies | Flags |
---|---|---|
βοΈ dec-x-14f5fc25 | 1 | |
βοΈ dec-x-791dab13 | 1 | |
βοΈ dec-x-3181f359 | 1 | |
βοΈ dec-x-4002ecfe | 1 | |
βοΈ dec-x-995424b7 | 2 | |
βοΈ dec-x-d95ea48b | 1 |