id: "SC-08(01)" title: "Cryptographic Protection" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-08.01" priority: "P1" implementation_level: "system" parent: "SC-08" enhancement: True
Statement
Implement cryptographic mechanisms to {{ insert: param, sc-08.01_odp }} during transmission.
Guidance
Encryption protects information from unauthorized disclosure and modification during transmission. Cryptographic mechanisms that protect the confidentiality and integrity of information during transmission include TLS and IPSec. Cryptographic mechanisms used to protect information integrity include cryptographic hash functions that have applications in digital signatures, checksums, and message authentication codes.
Assessment Objective
cryptographic mechanisms are implemented to {{ insert: param, sc-08.01_odp }} during transmission.
System and communications protection policy
procedures addressing transmission confidentiality and integrity
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
system developer
Cryptographic mechanisms supporting and/or implementing transmission confidentiality and/or integrity
mechanisms supporting and/or implementing alternative physical safeguards
organizational processes for defining and implementing alternative physical safeguards