V-206407
Web Server Security Requirements Guide
Title
Information at rest must be encrypted using a DOD-accepted algorithm to protect the confidentiality and integrity of the information.
Description
<VulnDiscussion>Data at rest is inactive data stored physically in any digital form (e.g., databases, data warehouses, spreadsheets, archives, tapes, off-site backups, mobile devices, etc.). Data at rest includes, but is not limited to, archived data, data that is not accessed or changed frequently, files stored on hard drives, USB thumb drives, files stored on backup tape and disks, and files stored off-site or on a storage area network. While data at rest can reside in many places, data at re...
Fix Text (Documentation Requirement)
Use a DOD-accepted algorithm to encrypt data at rest to protect the information's confidentiality and integrity.