[Assignment: organization-defined information at rest]. SC-28 Additional FedRAMP Requirements and Guidance: Requirement: The organization supports the capability to use cryptographic mechanisms to protect information at rest. SC-28 Control Summary Information Responsible Role: Parameter SC-28-1 Parameter SC-28-2 Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Abbreviation>, <Date of PA> SC-28 What is the solution and how is it implemented? SC-28 (1) The information system implements cryptographic mechanisms to prevent unauthorized disclosure and modification of [Assignment: organization-defined information] on [Assignment: organization-defined information system components]
[Assignment: organization-defined information at rest]. SC-28 Additional FedRAMP Requirements and Guidance: Requirement: The organization supports the capability to use cryptographic mechanisms to protect information at rest. SC-28 Control Summary Information Responsible Role: Parameter SC-28-1 Parameter SC-28-2 Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Abbreviation>, <Date of PA> SC-28 What is the solution and how is it implemented? SC-28 (1) The information system implements cryptographic mechanisms to prevent unauthorized disclosure and modification of [Assignment: organization-defined information] on [Assignment: organization-defined information system components]