Determine the use of encryption for CJI in transit outside a physically secure location and implement FIPS 140-3 certified cryptographic modules or a FIPS-validated symmetric algorithm (FIPS 197 AES) with a key of at least 256 bits for CJI in transit; modules under FIPS 140-3 review may be used in the interim, and FIPS 140-2 certificates are not acceptable after 21 September 2026.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.