The Data Encryption Policy’s purpose is to define for employees, computer users and IT department staff the encryption requirements to be used on all computer, device, desktop, laptop, server, network storage and storage area network disks, and drives that access or store organization information to prevent unauthorized access to organization communications, email, records, files, databases, application data and other material.
This policy, written by Erik Eckel for TechRepublic Premium, can be customized to fit the needs of your organization.
Featured text from the policy:
All organization data, at rest, must be encrypted. While organization data in transit, that is, organization information being transmitted between computers, applications, networks or systems, is also subject to encryption, the details and requirements of data in transit are outside the scope of this policy.
Subsequent to the data at rest encryption requirement, all organization devices, computers, servers, systems, hard disks, flash drives and storage components must be encrypted. All devices, computers, information archives, records, servers and data center equipment must possess encrypted storage. All storage devices, including external hard disks and flash drives used even temporarily to support or service data migrations, must also possess fully encrypted drives.
Improve your data encryption process with our five-page policy document. Previously priced at $19, this is now available for download at just $9. Alternatively, enjoy complimentary access with a Premium annual subscription. Click here to find out more.
TIME SAVED: Crafting this content required 10 hours of dedicated writing, editing and research.
About Author
