OSCAL Parameters within SC-28: Protection of Information at Rest
information at rest requiring protection is defined;