Skip to content

17-data-protection-and-keys.md

Latest commit

 

History

History
19 lines (15 loc) · 585 Bytes

17-data-protection-and-keys.md

File metadata and controls

19 lines (15 loc) · 585 Bytes
Raw

Data Protection and Keys

Objectives

  • Protect data in transit and at rest.
  • Standardize key management and rotation.

Controls

  • Encryption at rest for storage and databases.
  • TLS 1.2+ for data in transit.
  • Centralized key management with RBAC and audit logs.

Key management

  • Keys stored in a managed vault service.
  • Rotation enforced annually or upon compromise.
  • Access reviewed quarterly.

Related docs