Categories
Audit Machine Awareness Continuum GRC

FedRAMP and Encryption

A critical component of the FedRAMP framework is its adherence to cryptographic standards, specifically the Federal Information Processing Standard (FIPS) 140-3. Data privacy is essential to compliance, and the National Institute of Standards and Technology has clearly defined the requirements for just how a FedRAMP-compliance organization encrypts its data. 

This article will cover those requirements and how to approach them in your organization.

 

Categories
Awareness Continuum GRC Frameworks

Encryption Strategies for Controlled Unclassified Information (CUI) in Hybrid Cloud Systems

Adopting hybrid cloud systems—blending private on-premises infrastructure with public cloud services—has surged as organizations seek scalability, cost-efficiency, and flexibility. However, securing Controlled Unclassified Information (CUI) in these environments remains a critical challenge. These systems will use encryption to protect this data… but hybrid clouds introduce unique complexities due to data mobility, shared responsibility models, and varying compliance requirements. 

This article explores robust encryption strategies for safeguarding CUI in hybrid cloud architectures.

 

Categories
Awareness

What Is Post-Quantum Cryptography and Apple’s PQ3?

The existence of quantum computers on the horizon has shaken the cryptography world, and researchers and scientists have received a massive response to build feasible Post-Quantum Cryptography (PCQ). Recently, Apple has taken an enormous step forward by announcing their own PCQ systems, PQ3, in Apple devices. 

Learn more about PCQ and Apple’s announcement and the more significant impact of post-quantum encryption.

Exit mobile version