To ensure endpoint encryption framework is consistently implemented and provides the intended security outcome for endpoint encryption.
Define the required process, scope, roles, and control criteria for endpoint encryption framework; implement through approved centralized tooling where practical; document evidence, monitor compliance, and establish remediation and escalation paths.
| FRAMEWORK CODE | FRAMEWORK NAME & DETAILS | FAMILY / CATEGORY | VERSION | ACTION |
|---|---|---|---|---|
| CIS-V8 | CIS Controls CIS Controls are a prioritized set of cybersecurit... Clause: Control 03 – Data Protection: 3.6 – Encrypt Data on End-User Devices |
CIS
Best Practice
|
vv8 | View → |
| COBIT2019 | COBIT COBIT is an enterprise governance and management f... Clause: 4.2 – Align, Plan and Organize (APO) > APO13 – Managed Security > APO13.01 – Establish and maintain an information security management system. 4.4 – Deliver, Service and Support (DSS) > DSS05 – Managed Security Services > DSS05.03 – Manage endpoint security. |
COBIT
Governance Framework
|
v2019 | View → |
| DORA | Digital Operational Resilience Act The EU Digital Operational Resilience Act establis... Clause: Article 9(4)(d) – Strong authentication, cryptographic keys and encryption Article 9(3) – ICT solutions/processes for secure data transfer and prevention of loss, unauthorised access and data compromise |
EU
Regulation
|
vCurrent | View → |
| GDPR | General Data Protection Regulation (GDPR) The General Data Protection Regulation is a bindin... Clause: Article 32(1)(a) – Pseudonymisation and encryption |
EU
Regulation
|
vCurrent | View → |
| IRDAI | IRDAI Information & Cyber Security Guidelines IRDAI information and cyber-security requirements... Clause: §2.6-3.7 – IT Service Management |
India
Guideline
|
vLatest | View → |
| ISO27002 | ISO/IEC 27002 ISO/IEC 27002 is a guidance standard containing a... Clause: 8.1 – User endpoint devices; 8.24 – Use of cryptography |
ISO
Standard
|
v2022 | View → |
| NIS2 | NIS2 Directive The NIS2 Directive establishes EU-wide cybersecuri... Clause: Article 21(2)(h) – Policies and procedures regarding cryptography and, where appropriate, encryption |
EU
Directive
|
vCurrent | View → |
| NIST-CSF | NIST Cybersecurity Framework (CSF) The NIST Cybersecurity Framework provides high-lev... Clause: ID.AM – Asset Management | ID.AM-08 – Systems, hardware, software, services, and data are managed throughout their life cycles PR.PS – Platform Security | PR.PS-02 – Software is maintained, replaced, and removed commensurate with risk |
NIST
Framework
|
v2 | View → |
| NIST80053 | NIST SP 800-53 NIST SP 800-53 Rev. 5 presents control families, i... Clause: 3.18 – SYSTEM AND COMMUNICATIONS PROTECTION; SC-28 – PROTECTION OF INFORMATION AT REST, SC-13 – CRYPTOGRAPHIC PROTECTION |
NIST
Control Catalog
|
vRev. 5 | View → |
| NPCI-ISR | NPCI Information Security Requirements NPCI information-security requirements define cont... Clause: Security Measures / Controls; Data Security – Encryption |
India
Standard
|
vLatest | View → |
| PCI-DSS | PCI DSS PCI DSS is an industry security standard maintaine... Clause: 3.5.1 – PAN is rendered unreadable anywhere it is stored |
PCI
Standard
|
v4 | View → |
| RBI-CSF | RBI Cyber Security Framework / Master Directions RBI cyber-security requirements and directions set... Clause: 8) User Access Control / Management – 8.1 Secure access with protection of data at rest and in transit |
India
Regulation
|
vLatest | View → |
| SEBI-CSCRF | SEBI Cyber Security & Cyber Resilience Framework SEBI’s Cybersecurity and Cyber Resilience Framewor... Clause: 3.3 PR.DS: Data Security |
India
Regulation
|
vLatest | View → |
| SOC2 | SOC 2 Trust Services Criteria SOC 2 is an independent examination and reporting... Clause: CC6.1 – Logical and Physical Access Controls – The entity implements logical access security software, infrastructure, and architectures over protected information assets to protect them from security events to meet the entity's objectives. |
AICPA
Audit Framework
|
vLatest | View → |