DATA-2 File Store Encryption

What is this control about?

File encryption protects individual files or file systems by encrypting them with a specific key and making them accessible only to authorized persons.

Available tools in the marketplace

Available templates

TrustCloud has a curated list of templates internally or externally sourced to help you get started. Click on the link for a downloadable version:

• Encryption best practices from NIST (National Institute of Standards and Technology)

Control implementation

Note: This control is 100% automated by TrustCloud. Connect your system to enjoy the benefit of automation

For a manual implementation: 

Enable encryption on file storage system using the most recent encryption technologies

What evidence do auditors look for?

Most auditors, at a minimum are looking for the below suggested action:

• Provide screenshot of the file storage configuration settings showing that encryption is enabled

Evidence example

From the suggested action above, an example is provided below.

1. Provide a screenshot of the file storage configuration settings showing that encryption is enabled.

Example of encryption configuration showing that encryption is enabled:

Google search