Question OPDC-06
Is sensitive data encrypted in storage (e.g., disk encryption, at rest)?
| Weight | 40 |
| High Risk | Yes |
| Required | Yes |
| Compliant Answer | Yes |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
Decribe why sensitive data is not encrypted in storage.
Answering "YES"
Summarize your data encryption strategy.
Reason for Question
The need for encryption at rest is unique to your institution's implementation of a system. In particular, system components, architectures, and data flows all factor into the need for this control.
Follow-Up Inquiries
Follow-up inquiries for data encryption at-rest will be institution/implementation specific.
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]