314.4(c)(3)—314.4(c)(3)
>Control Description
Protect by encryption all customer information held or transmitted by you both in transit over external networks and at rest. To the extent you determine that encryption of customer information, either in transit over external networks or at rest, is infeasible, you may instead secure such customer information using effective alternative compensating controls reviewed and approved by your Qualified Individual;
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.