+APP.4.3.A24 Data Encryption in Databases (H)

APP.4.3.A24 Data Encryption in Databases (H)

The data stored in databases SHOULD be encrypted. In this process, the following factors (among others) SHOULD be considered beforehand:

  • Effects on performance
  • Key management processes and methods, including separate key storage and security
  • Effects on backup recovery concepts
  • Functional impact on the database (regarding sorting options, for example)

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.39 Malware
blocks G 0.46 Loss of Integrity of Sensitive Information