STIGhub
STIGs
RMF Controls
Compare
← All Controls
SC-28 (1)
System and Communications Protection
Rev 3
Protection of Information at Rest
CCI Identifiers (6)
CCI-001200
The organization employs cryptographic mechanisms to prevent unauthorized disclosure of information at rest unless otherwise protected by alternative physical measures.
CCI-001666
The organization employs cryptographic mechanisms to prevent unauthorized modification of information at rest unless otherwise protected by alternative physical measures.
CCI-002473
Defines the information at rest for which cryptographic mechanisms will be implemented.
CCI-002474
Defines the system components which require the implementation of cryptographic mechanisms to prevent unauthorized disclosure and modification of organization-defined information at rest.
CCI-002475
Implement cryptographic mechanisms to prevent unauthorized modification of organization-defined information at rest on organization-defined system components.
CCI-002476
Implement cryptographic mechanisms to prevent unauthorized disclosure of organization-defined information at rest on organization-defined system components.
Linked STIG Checks (129)
Across 89 STIGs. Click to expand.
▶
Amazon Linux 2023 Security Technical Implementation Guide
1 check
▶
Anduril NixOS Security Technical Implementation Guide
1 check
▶
Apache Tomcat Application Server 9 Security Technical Implementation Guide
1 check
▶
Apple macOS 12 (Monterey) Security Technical Implementation Guide
1 check
▶
Apple macOS 13 (Ventura) Security Technical Implementation Guide
1 check
▶
Apple macOS 15 (Sequoia) Security Technical Implementation Guide
1 check
▶
Apple macOS 26 (Tahoe) Security Technical Implementation Guide
1 check
▶
Application Security and Development Security Technical Implementation Guide
2 checks
▶
Application Server Security Requirements Guide
2 checks
▶
BlackBerry PlayBook OS V2.1 Security Technical Implementation Guide
1 check
▶
CA IDMS Security Technical Implementation Guide
1 check
▶
Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide
1 check
▶
Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide
1 check
▶
Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide
1 check
▶
Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide
1 check
▶
Cloud Computing Mission Owner Operating System Security Requirements Guide
1 check
▶
Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide
1 check
▶
Container Platform Security Requirements Guide
1 check
▶
Crunchy Data Postgres 16 Security Technical Implementation Guide
2 checks
▶
Crunchy Data PostgreSQL Security Technical Implementation Guide
2 checks
▶
Database Security Requirements Guide
2 checks
▶
Domain Name System (DNS) Security Requirements Guide
2 checks
▶
EDB Postgres Advanced Server v11 on Windows Security Technical Implementation Guide
2 checks
▶
EDB Postgres Advanced Server v9.6 Security Technical Implementation Guide
2 checks
▶
EnterpriseDB Postgres Advanced Server (EPAS) Security Technical Implementation Guide
2 checks
▶
General Purpose Operating System Security Requirements Guide
2 checks
▶
HPE 3PAR StoreServ 3.2.x Security Technical Implementation Guide
1 check
▶
HPE 3PAR StoreServ 3.3.x Security Technical Implementation Guide
1 check
▶
IBM AIX 7.x Security Technical Implementation Guide
1 check
▶
IBM Aspera Platform 4.2 Security Technical Implementation Guide
10 checks
▶
IBM DB2 V10.5 LUW Security Technical Implementation Guide
2 checks
▶
IBM MQ Appliance V9.0 AS Security Technical Implementation Guide
1 check
▶
IBM WebSphere Liberty Server Security Technical Implementation Guide
2 checks
▶
IBM WebSphere Traditional V9.x Security Technical Implementation Guide
2 checks
▶
IBM z/OS ACF2 Security Technical Implementation Guide
1 check
▶
IBM z/OS TSS Security Technical Implementation Guide
1 check
▶
Kubernetes Security Technical Implementation Guide
1 check
▶
Mainframe Product Security Requirements Guide
2 checks
▶
MariaDB Enterprise 10.x Security Technical Implementation Guide
2 checks
▶
MarkLogic Server v9 Security Technical Implementation Guide
2 checks
▶
Microsoft Azure SQL Database Security Technical Implementation Guide
2 checks
▶
Microsoft Azure SQL Managed Instance Security Technical Implementation Guide
2 checks
▶
Microsoft IIS 10.0 Site Security Technical Implementation Guide
1 check
▶
Microsoft Office 365 ProPlus Security Technical Implementation Guide
1 check
▶
Microsoft Office System 2016 Security Technical Implementation Guide
2 checks
▶
Microsoft SQL Server 2022 Database Security Technical Implementation Guide
1 check
▶
Microsoft Windows 10 Security Technical Implementation Guide
3 checks
▶
Microsoft Windows 11 Security Technical Implementation Guide
2 checks
▶
Microsoft Windows 2012 Server Domain Name System Security Technical Implementation Guide
1 check
▶
Microsoft Windows Server 2016 Security Technical Implementation Guide
1 check
▶
Microsoft Windows Server 2019 Security Technical Implementation Guide
1 check
▶
Microsoft Windows Server 2022 Security Technical Implementation Guide
1 check
▶
Microsoft Windows Server 2025 Security Technical Implementation Guide
1 check
▶
Microsoft Windows Server Domain Name System (DNS) Security Technical Implementation Guide
1 check
▶
Mirantis Kubernetes Engine Security Technical Implementation Guide
1 check
▶
MongoDB Enterprise Advanced 3.x Security Technical Implementation Guide
1 check
▶
MongoDB Enterprise Advanced 4.x Security Technical Implementation Guide
1 check
▶
MongoDB Enterprise Advanced 7.x Security Technical Implementation Guide
1 check
▶
MongoDB Enterprise Advanced 8.x Security Technical Implementation Guide
1 check
▶
MS SQL Server 2014 Database Security Technical Implementation Guide
1 check
▶
MS SQL Server 2014 Instance Security Technical Implementation Guide
1 check
▶
MS SQL Server 2016 Database Security Technical Implementation Guide
1 check
▶
Nutanix Acropolis Application Server Security Technical Implementation Guide
1 check
▶
Nutanix Acropolis GPOS Security Technical Implementation Guide
1 check
▶
Nutanix AOS 5.20.x Application Security Technical Implementation Guide
1 check
▶
Oracle Database 19c Security Technical Implementation Guide
1 check
▶
Oracle Linux 7 Security Technical Implementation Guide
1 check
▶
Oracle Linux 8 Security Technical Implementation Guide
1 check
▶
Oracle Linux 9 Security Technical Implementation Guide
1 check
▶
Oracle MySQL 8.0 Security Technical Implementation Guide
2 checks
▶
PostgreSQL 9.x Security Technical Implementation Guide
2 checks
▶
Red Hat Enterprise Linux 10 Security Technical Implementation Guide
4 checks
▶
Red Hat Enterprise Linux 7 Security Technical Implementation Guide
1 check
▶
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
1 check
▶
Red Hat OpenShift Container Platform 4.12 Security Technical Implementation Guide
1 check
▶
Red Hat OpenShift Container Platform 4.x Security Technical Implementation Guide
1 check
▶
Redis Enterprise 6.x Security Technical Implementation Guide
2 checks
▶
Riverbed NetIM OS Security Technical Implementation Guide
1 check
▶
Solaris 11 SPARC Security Technical Implementation Guide
2 checks
▶
Solaris 11 X86 Security Technical Implementation Guide
2 checks
▶
SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide
1 check
▶
SUSE Linux Enterprise Server 12 Security Technical Implementation Guide
1 check
▶
Tanium 7.3 Security Technical Implementation Guide
1 check
▶
Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide
1 check
▶
Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide
1 check
▶
Virtual Machine Manager Security Requirements Guide
2 checks
▶
VMware vSphere 7.0 ESXi Security Technical Implementation Guide
1 check
▶
VMware vSphere 8.0 vCenter Security Technical Implementation Guide
1 check
▶
Web Server Security Requirements Guide
1 check