File Encryption
Engineer/DeveloperSecurity Specialist
No contributors yet. Be the first to contribute!
🔑 Key Takeaway: Sensitive files on disks and shares must use trusted file encryption — OS login locks alone do not protect power-off or copied files.
File encryption protects individual objects when full-disk or volume encryption is unavailable or when files leave the encrypted host boundary.
File encryption protects sensitive information stored in files.
Use strong encryption algorithms to encrypt sensitive files stored on local and network drives. There are multiple tools available for file encryption; use one that is regarded as trusted.
Further Reading
- Encryption overview: framework map and shared concepts
- NIST SP 800-175B: guideline for using cryptographic standards in the federal government (useful baseline references)
- OWASP Cryptographic Storage Cheat Sheet