Protect the confidentiality and integrity of CJI at rest outside physically secure locations with FIPS 140-3 certified cryptographic modules or FIPS 197 encryption using symmetric keys of at least 256 bits; metadata derived from unencrypted CJI is protected like CJI and not used commercially; and CJI, encrypted or not, may be stored in cloud environments only within the physical boundaries of an APB-member country (the United States and its territories, Indian tribes and Canada) under the legal authority of an APB-member agency, with exchanges with foreign governments under international agreements excepted.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.