Sensitive data is encrypted when stored to prevent unauthorised access
Sekit's Encryption at rest policy is a topic-specific policy under A.5.1 that requires sensitive data to stay encrypted on laptops, servers, cloud storage, backups and removable media.
This policy facet requires written rules for encrypting sensitive data at rest across laptops, servers, cloud services and backups, one leg of A.8.24's cryptography scope.