Encryption

Data at rest will be encrypted for all systems of moderate or higher risk impact and will be considered for systems of low impact. All data in transit will be encrypted with modern algorithms appropriate to the software. For web traffic, this is currently TLS version 1.2 or higher.