NIST 800-53 rev.5/System and Communications Protection/832 of 1011
SC-28 (01)Protection of Information at Rest | Cryptographic Protection
Control family: System and Communications Protection
Control description
Implement cryptographic mechanisms to prevent unauthorized disclosure and modification of the following information at rest on [Assignment: organization-defined system components or media]: [Assignment: organization-defined information].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.