Methods for encrypting data in motion File TransfersĮncryption of Confidential file transfers can be achieved via the use of an encrypted transmission protocol or network service (e.g., scp, sftp, etc) or by transferring a confidential file that has been encrypted prior to the transmission. Encryption capabilities native to database server software may allow for encryption of specific tables or columns of a database and may also be required to segregate access rights among multiple applications that utilize a single database server. File Encryption – File by FileĮncryption of Confidential data should be provided to facilitate the secure transport of individual files over a network without transmission encryption or to off-line storage devices (e.g., CDs, DVDs, or USB drives.) Database StorageĮncryption of Confidential data contained in a database server should be provided through the use of whole disk encryption or through features native to the database server software. Methods for encrypting data at rest Whole Disk EncryptionĮncryption of data stored on portable computing devices (e.g., PDAs, tablet PCs, laptops, and smart phones), as well as storage media, (e.g., CDs, DVDs, and USB drives) should be provided through the use of a whole disk encryption tool or one that can at least be configured to encrypt all Confidential data.
An example of data in motion is using a web browser to get data from a remote server. An example of data at rest is a spreadsheet with data located on the hard drive of a desktop or laptop computer. In computing, encryption is primarily used to protect data in one of two instances. To those who do not have the code, the data is unusable.
Encryption and decryption are used to allow access to data only to those who have the code. After encryption, in order to read or use the concealed data, the code used during encryption must be known. Sensitive data should be retained or handled only when required.Įncryption can be an effective information protection control when it is necessary to possess confidential data.Įncryption is the process of concealing data by using a code. The most reliable way to protect confidential or sensitive data is to avoid handling sensitive data.
0 kommentar(er)
