← CIS Controls v8 in plain English

3.11 IG2

Control 3 / Data Protection

Encrypt Sensitive Data at Rest

Think of it likeScrambling everything stored in the long-term archive room so even someone who reaches the shelves reads only gibberish.

In plain English

Data sitting in servers, databases, and backups is encrypted in storage, so reaching the disk does not reveal the contents, distinct from the laptops and phones covered earlier.

Related CSF subcategories (unofficial mapping)