SekitCrosswalk
ENES
Start now
Sekit CSF · Data Security · Process

RCF-0095Encryption at rest

Encryption of stored data is consistently applied to all sensitive information

Mapping at a glance
RCF-0095Encryption at restData Security · Process
A.8.24Use of cryptographyISO/IEC 27001:2022PR.DS-01Data-at-rest protectedNIST CSF 2.0PR.DS-02Data-in-transit protectedNIST CSF 2.0

RCF-0095 maps to 3 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.24Use of cryptographysupportsThe process facet checks on a schedule that every device and data store with sensitive information has encryption switched on, closing the gap between policy and reality.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.DS-01Data-at-rest protectedPR.DS-02Data-in-transit protected

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Encryption standards evidence
The proof that sensitive data is encrypted when stored (databases, storage) and when transmitted (encrypted connections).
From the Sekit evidence catalog

This topic through the other lenses

RCF-0094 PolicyRCF-0096 Technical

All Data Security controls

Data Security
Ask Sekura: “What evidence proves RCF-0095?”
Also via MCP, free with account