Sekit CSF · Data Security · Policy

RCF-0094Encryption at rest

Sensitive data is encrypted when stored to prevent unauthorised access

Mapping at a glance

RCF-0094Encryption at restData Security · Policy

A.5.1Policies for information securityISO/IEC 27001:2022 · Annex A controls A.8.24Use of cryptographyISO/IEC 27001:2022 · Annex A controls PR.DS-01Data-at-rest protectedNIST CSF 2.0 PR.DS-02Data-in-transit protectedNIST CSF 2.0

RCF-0094 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.5.1Policies for information securitysupportsSekit's Encryption at rest policy is a topic-specific policy under A.5.1 that requires sensitive data to stay encrypted on laptops, servers, cloud storage, backups and removable media.A.8.24Use of cryptographysupportsThis policy facet requires written rules for encrypting sensitive data at rest across laptops, servers, cloud services and backups, one leg of A.8.24's cryptography scope.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.DS-01Data-at-rest protected PR.DS-02Data-in-transit protected

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Encryption standards evidence

The proof that sensitive data is encrypted when stored (databases, storage) and when transmitted (encrypted connections).

From the Sekit evidence catalog

This topic through the other lenses

All Data Security controls

Ask Sekura: “What evidence proves RCF-0094?”

Connect your AI · free MCP

https://sekit.ai/api/mcp/crosswalk

In Claude or ChatGPT, add a custom connector and paste this URL.
Sign in with your email to finish. Free, read-only, no organization required.