NIST SP 800-66 Rev 2
Technical

NIST SP 800-66 Rev 2 164.312(e)(2)(i): Integrity Controls for Transmission (Addressable)

Implement security measures to ensure electronically transmitted ePHI is not improperly modified without detection until disposed of. NIST recommends authenticated TLS, signed messages, and integrity validation on receipt.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 32 controls across 18 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

SOC 2 · 5 controls

  • SOC2-C1.1 C1.1 Identifying and maintaining confidential information
  • SOC2-CC6.7 CC6.7 Restricting and protecting information in transmission, movement and removal
  • SOC2-CC6.8 CC6.8 Preventing and detecting unauthorised or malicious software
  • SOC2-CC7.1 CC7.1 Detecting configuration changes and new vulnerabilities
  • SOC2-CC7.2 CC7.2 Monitoring system components for anomalies

ISO 27701:2019 · 3 controls

  • 6.7.1 Cryptographic controls
  • 7.4.9 PII transmission controls
  • 8.4.3 PII transmission controls

AWS Well-Architected Security Pillar · 2 controls

C5 (Germany) · 2 controls

  • C5-COS-08 Policies for data transmission
  • C5-CRY-02 Encryption of data for transmission (transport encryption)

CIS Controls v8 · 2 controls

  • CIS-12.6 Use of Secure Network Management and Communication Protocols
  • CIS-3.10 Encrypt Sensitive Data in Transit

CMMC 2.0 · 2 controls

FedRAMP High · 2 controls

  • SC-23 Session Authenticity
  • SC-8 Transmission Confidentiality and Integrity

FedRAMP Moderate · 2 controls

  • SC-23 Session Authenticity
  • SC-8 Transmission Confidentiality and Integrity

ISO 27001:2022 · 2 controls

  • 8.21 Security of network services
  • 8.24 Use of cryptography

NIST SP 800-171 Rev 3 · 2 controls

  • 03.13.08 Transmission Confidentiality and Integrity
  • 03.13.15 Session Authenticity

Azure Security Benchmark · 1 control

  • DP-3 Encrypt sensitive data in transit

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

ISO 27002:2022 · 1 control

  • 5.14 Information transfer

NIST Cybersecurity Framework 2.0 · 1 control

  • NIST-CSF-PR.DS-02 The confidentiality, integrity, and availability of data-in-transit are protected

NIST SP 800-161 Rev 1 · 1 control

  • 161R1-SC-8 Transmission Confidentiality and Integrity

NIST SP 800-172 · 1 control

  • 3.1.3e Employ Secure Information Transfer Solutions

NIST SP 800-53 Rev 5 · 1 control

  • NIST800-SC-8 SC-8 Transmission Confidentiality and Integrity

PCI DSS 4.0 · 1 control

  • 4.2.1 4.2.1 Strong cryptography safeguards PAN over public networks

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Technical

Query this from an agent

The graph holds this control, the 32 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-66 Rev 2 controls