Policy template

Cryptography & Encryption Policy template

This policy exists to ensure cryptography is used effectively to protect the confidentiality, authenticity and integrity of information. It applies to all systems, devices and data flows handling confidential or personal information.

Create this policy

What the policy contains

Encryption
Key management

Who is responsible

IT Manager
Information Security Manager
System owners

What you decide

Encrypted at restLaptops · Mobile devices · Servers · Databases · Backups · Removable media
Minimum TLS versionTLS 1.2 · TLS 1.3
Key managementCloud key management service · Hardware security module · Secrets vault

References covered

ISO/IEC 27001 Annex A: control 8.24
GDPR: Art. 32(1)(a) pseudonymisation and encryption of personal data
NIS2: Art. 21(2)(h) policies and procedures on cryptography and encryption

Other policy templates

Logging & Monitoring Policy
Vulnerability Management Policy
Acceptable Use of AI Policy
Project Management Policy
Quality Management Policy
Human Resources Policy