Topic

Network encryption

Applicable to

all

History

Jun 2022

All data communicated over network infrastructure is encrypted.

In supporting the adoption of zero trust principles, a recommendation to encrypt all data communicated over network infrastructure was introduced. Note, however, when selecting cryptographic equipment or software for this purpose, the assurance required will depend on the sensitivity or classification of the data and the physical security of the environment in which it is being applied. It is also important to note that some protocols cannot be encrypted and are therefore exempt. However, in such situations, where practical and feasible, an organisation should still consider transitioning to the use of alternative protocols that support encryption.