Standard:
YALE-MSS-7.1: Back up user-level and system-level data
YALE-MSS-7.1.3: Ensure backups are encrypted in transit and at rest
Low Risk Endpoint
Not Required
Moderate Risk Endpoint
Required
High Risk Endpoint
Required
Low Risk Server
Not Required
Moderate Risk Server
Required
High Risk Server
Required
Low Risk Mobile Device
Not Required
Moderate Risk Mobile Device
Not Required
High Risk Mobile Device
Not Required
Low Risk Network Printer
Not Required
Moderate Risk Network Printer
Not Required
High Risk Network Printer
Not Required
Details
Strong physical security controls can substitute for encryption at rest. See Yale-MSS-4.1 for physical security control requirements. If the device storing the backups meets Yale-MSS-4.1, an exception request is not required.