AuditRubric
data-protection

data-protection Controls

5 controls across 3 frameworks.

CISA CPG

da-3

Data in transit is encrypted using modern protocols

Data Security / Data Security
ds-6

Full-disk encryption is enforced on all endpoints and portable storage

Device Security / Device Security

CMMC L1

cmmc-ac-4

Control FCI posted or processed on publicly accessible systems

Access Control / Public Systems

SOC2

c1-1

Confidential information is identified and protected

Confidentiality / Confidentiality
cc6-7

Sensitive data is protected during transmission and storage

Security / Logical and Physical Access