SC-28.1: Cryptographic Protection

cryptographic mechanisms are implemented to prevent unauthorized disclosure of information at rest on system components or media ;

cryptographic mechanisms are implemented to prevent unauthorized modification of information at rest on system components or media .

System and communications protection policy

procedures addressing the protection of information at rest

system design documentation

system configuration settings and associated documentation

cryptographic mechanisms and associated configuration documentation

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

system developer

Cryptographic mechanisms implementing confidentiality and integrity protections for information at rest