Requirement
[A: M | B: M] Cybersecurity requirements for cryptography must be defined, documented and approved, covering at minimum:
Sub-Controls
2-8-1-1
Requirement: [A: M | B: M] Use of data encryption at rest and in transit.
2-8-1-2
Requirement: [A: M | B: R] Use of secure, modern cryptographic methods and algorithms when creating, storing and transferring data, and likewise for all network communication media, per the (basic level) requirements of the National Cryptographic Standards issued by the NCA.
