Belgium CyberFundamentals BE-CF-08: Cryptographic protection of data

What else in your programme already covers this

This control maps to 22 controls across 10 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 23837:2023 · 3 controls

23837-1.2 Normative references
23837-1.5.2 Cryptographic module requirements
23837-1.5.3 Network device testing requirements

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 2 controls

AWWA-3.2 Remote Access Security
AWWA-3.4 Encryption and Data Protection

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-PR.DS-01 The confidentiality, integrity, and availability of data-at-rest are protected
NIST-CSF-PR.DS-02 The confidentiality, integrity, and availability of data-in-transit are protected

APPI · 1 control

APPI-A34 Request for Correction, Addition or Deletion

ASD Strategies to Mitigate Cyber Security Incidents · 1 control

ASD37-17 TLS encryption between email servers (Limited)

IEC 62351 - Power Systems Communication Security · 1 control

62351-9 Cyber security key management

ISO/IEC 27010:2015 · 1 control

27010-10.1 Cryptographic Protection

ISO/IEC 27011:2024 · 1 control

27011-8.3 Cryptography and key management

ISO/IEC 27400:2022 · 1 control

27400-6.2 Device Identity and Authentication

ISO/IEC 29115:2013 - Entity Authentication Assurance Framework · 1 control

29115-7.4 Level of Assurance 4 (LoA4)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.