NIST 800-171 v2
110 security requirements available
3.13.16Derived Requirement
System and Communications Protection
Security Requirement
Protect the confidentiality of CUI at rest.
Discussion
Information at rest refers to the state of information when it is not in process or in transit and is located on storage devices as specific components of systems. The focus of protection at rest is not on the type of storage device or the frequency of access but rather the state of the information. Organizations can use different mechanisms to achieve confidentiality protections, including the use of cryptographic mechanisms and file share scanning. Organizations may also use other controls including secure off-line storage in lieu of online storage when adequate protection of information at rest cannot otherwise be achieved or continuous monitoring to identify malicious code at rest. See [NIST CRYPTO].
- Framework
- NIST SP 800-171 Rev 2
- Family
- System and Communications Protection
- Requirement Type
- derived
Related Frameworks
3 paths across 2 frameworks
Related Frameworks
NIST 800-531 mapping
SC-28
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI2 mappings
CCI-001199
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002472
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
Related STIGs
107 STIGs reach this control through 11 CCIs via 800-53 control SC-28. Expand a row to see the responsible NICE and O*NET roles.
Operating System — Desktop
5 STIGs
Operating System — Desktop
5 STIGsMicrosoft Windows 10 Security Technical Implementation Guide
32025-02-254 of 261 findings match
H3M1
Microsoft Windows 11 Security Technical Implementation Guide
V2R72026-02-123 of 262 findings match
H2M1
Apple macOS 14 (Sonoma) Security Technical Implementation Guide
22024-12-041 of 155 findings match
H1
Apple macOS 15 (Sequoia) Security Technical Implementation Guide
V1R72026-02-061 of 160 findings match
H1
Apple macOS 26 (Tahoe) Security Technical Implementation Guide
V1R22026-02-111 of 160 findings match
H1
Operating System — Server
27 STIGs
Operating System — Server
27 STIGsGeneral Purpose Operating System Security Requirements Guide
V3R32025-09-224 of 203 findings match
H2M2
Red Hat Enterprise Linux 10 Security Technical Implementation Guide
V1R12026-03-114 of 434 findings match
H1M3
Solaris 11 SPARC Security Technical Implementation Guide
V3R52026-02-193 of 217 findings match
L3
Solaris 11 X86 Security Technical Implementation Guide
V3R52026-02-193 of 216 findings match
L3
Microsoft Windows Server 2025 Security Technical Implementation Guide
V1R12026-02-202 of 284 findings match
M2
Microsoft Windows Server Domain Name System (DNS) Security Technical Implementation Guide
V2R42026-02-232 of 81 findings match
M2
Oracle Linux 9 Security Technical Implementation Guide
V1R52026-02-172 of 448 findings match
H1M1
Amazon Linux 2023 Security Technical Implementation Guide
V1R32026-02-271 of 187 findings match
H1
Show 19 more STIGs in this category →Hide additional STIGs
Anduril NixOS Security Technical Implementation Guide
V1R22025-08-191 of 103 findings match
H1
Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide
22025-05-161 of 172 findings match
M1
Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide
V2R82026-02-061 of 188 findings match
M1
Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide
V1R52026-02-061 of 194 findings match
M1
Cloud Computing Mission Owner Operating System Security Requirements Guide
V1R32025-08-131 of 17 findings match
H1
Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide
V1R62026-02-271 of 439 findings match
H1
HPE 3PAR StoreServ 3.2.x Security Technical Implementation Guide
V2R12021-11-231 of 19 findings match
L1
HPE 3PAR StoreServ 3.3.x Security Technical Implementation Guide
V2R12024-08-271 of 30 findings match
M1
IBM AIX 7.x Security Technical Implementation Guide
V3R22026-02-061 of 283 findings match
M1
Microsoft Windows Server 2019 Security Technical Implementation Guide
32025-05-231 of 275 findings match
H1
Microsoft Windows Server 2019 Security Technical Implementation Guide
V3R82026-02-121 of 282 findings match
H1
Microsoft Windows Server 2022 Security Technical Implementation Guide
V2R82026-02-131 of 282 findings match
H1
Oracle Linux 8 Security Technical Implementation Guide
V2R82026-02-131 of 375 findings match
H1
Red Hat Enterprise Linux 8 Security Technical Implementation Guide
V2R72026-02-051 of 366 findings match
H1
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
V2R82026-02-051 of 446 findings match
H1
SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide
V1R42026-02-101 of 208 findings match
H1
SUSE Linux Enterprise Server 12 Security Technical Implementation Guide
32025-05-141 of 211 findings match
H1
SUSE Linux Enterprise Server 15 Security Technical Implementation Guide
V2R72026-02-191 of 214 findings match
H1
Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide
V2R52026-02-191 of 226 findings match
M1
Operating System — Mainframe
5 STIGs
Operating System — Mainframe
5 STIGsMainframe Product Security Requirements Guide
V3R42025-09-104 of 194 findings match
H2M2
IBM z/OS ACF2 Security Technical Implementation Guide
V9R82026-03-091 of 225 findings match
H1
IBM z/OS RACF Security Technical Implementation Guide
V9R82026-03-091 of 222 findings match
H1
IBM z/OS TSS Security Technical Implementation Guide
V9R82026-03-091 of 230 findings match
H1
IBM zVM Using CA VM:Secure Security Technical Implementation Guide
V2R22022-08-311 of 77 findings match
M1
Operating System — Mobile
12 STIGs
Operating System — Mobile
12 STIGsApple iOS/iPadOS 18 Security Technical Implementation Guide
V2R22025-12-013 of 92 findings match
H1L2
Apple iOS/iPadOS 26 Security Technical Implementation Guide
V1R22025-12-013 of 92 findings match
H1L2
Apple visionOS 2 Security Technical Implementation Guide
V1R12025-09-302 of 50 findings match
H1L1
Apple visionOS 26 Security Technical Implementation Guide
V1R12026-03-102 of 51 findings match
H1L1
Samsung Android 16 COBO Security Technical Implementation Guide
V1R32026-02-061 of 45 findings match
H1
Samsung Android 16 COPE Security Technical Implementation Guide
V1R22026-02-111 of 48 findings match
H1
Samsung Android OS 13 with Knox 3.x COBO Security Technical Implementation Guide
22024-12-061 of 30 findings match
H1
Samsung Android OS 13 with Knox 3.x COPE Security Technical Implementation Guide
22024-12-061 of 30 findings match
H1
Show 4 more STIGs in this category →Hide additional STIGs
Samsung Android OS 14 with Knox 3.x COBO Security Technical Implementation Guide
22024-12-061 of 36 findings match
H1
Samsung Android OS 14 with Knox 3.x COPE Security Technical Implementation Guide
22024-12-061 of 39 findings match
H1
Samsung Android OS 15 with Knox 3.x COBO Security Technical Implementation Guide
12024-12-101 of 37 findings match
H1
Samsung Android OS 15 with Knox 3.x COPE Security Technical Implementation Guide
12024-12-101 of 40 findings match
H1
Network Device
12 STIGs
Network Device
12 STIGsDomain Name System (DNS) Security Requirements Guide
V4R22025-12-195 of 119 findings match
H2M3
BIND 9.x Security Technical Implementation Guide
22024-02-153 of 70 findings match
M3
BIND 9.x Security Technical Implementation Guide
V3R22026-02-253 of 73 findings match
M3
AAA Services Security Requirements Guide
V2R22024-12-041 of 77 findings match
H1
Application Layer Gateway Security Requirements Guide
V2R32025-09-151 of 160 findings match
M1
Cisco ISE NDM Security Technical Implementation Guide
V2R32025-12-111 of 53 findings match
H1
Fortinet FortiGate Firewall NDM Security Technical Implementation Guide
V1R52025-11-191 of 60 findings match
H1
HPE Alletra Storage ArcusOS Web Server Security Technical Implementation Guide
V1R12026-03-031 of 6 findings match
M1
Show 4 more STIGs in this category →Hide additional STIGs
Juniper EX Series Switches Network Device Management Security Technical Implementation Guide
V2R42025-12-101 of 56 findings match
H1
Network Device Management Security Requirements Guide
V5R42025-09-101 of 105 findings match
H1
Network Device Management Security Requirements Guide
V5R32025-02-111 of 104 findings match
H1
Riverbed NetIM OS Security Technical Implementation Guide
V1R12025-10-021 of 154 findings match
M1
Database
18 STIGs
Database
18 STIGsMicrosoft Azure SQL Managed Instance Security Technical Implementation Guide
V1R12025-10-076 of 84 findings match
H1M5
Database Security Requirements Guide
V4R52026-02-264 of 142 findings match
H3M1
Microsoft SQL Server 2022 Database Security Technical Implementation Guide
V1R32026-02-254 of 23 findings match
H1M3
MS SQL Server 2016 Database Security Technical Implementation Guide
V3R52026-03-094 of 23 findings match
H1M3
Crunchy Data Postgres 16 Security Technical Implementation Guide
V1R22026-02-273 of 111 findings match
H1M2
Crunchy Data PostgreSQL Security Technical Implementation Guide
V3R12024-08-273 of 113 findings match
H1M2
EnterpriseDB Postgres Advanced Server (EPAS) Security Technical Implementation Guide
V2R12024-08-273 of 118 findings match
H1M2
IBM DB2 V10.5 LUW Security Technical Implementation Guide
V2R12023-06-113 of 93 findings match
M3
Show 10 more STIGs in this category →Hide additional STIGs
MariaDB Enterprise 10.x Security Technical Implementation Guide
V2R52026-03-023 of 107 findings match
H3
MarkLogic Server v9 Security Technical Implementation Guide
V3R22024-09-043 of 80 findings match
H3
Microsoft Azure SQL Database Security Technical Implementation Guide
V2R32025-06-113 of 76 findings match
H3
Microsoft SQL Server 2022 Instance Security Technical Implementation Guide
V1R42026-02-253 of 79 findings match
H3
MongoDB Enterprise Advanced 8.x Security Technical Implementation Guide
V1R12026-02-203 of 55 findings match
H2M1
MS SQL Server 2016 Instance Security Technical Implementation Guide
V3R62025-12-083 of 84 findings match
H1M2
Oracle MySQL 8.0 Security Technical Implementation Guide
V2R22024-09-043 of 100 findings match
H3
Redis Enterprise 6.x Security Technical Implementation Guide
V2R22024-09-043 of 71 findings match
H3
MongoDB Enterprise Advanced 7.x Security Technical Implementation Guide
V1R12024-09-272 of 50 findings match
H1M1
Oracle Database 19c Security Technical Implementation Guide
V1R52026-02-252 of 96 findings match
H1M1
Web / Application Server
12 STIGs
Web / Application Server
12 STIGsApplication Server Security Requirements Guide
V4R42025-09-105 of 137 findings match
H2M3
Application Security and Development Security Technical Implementation Guide
V6R42025-09-094 of 286 findings match
H2M2
Application Programming Interface (API) Security Requirements Guide
V1R12025-09-243 of 65 findings match
H1M2
Microsoft Exchange 2016 Mailbox Server Security Technical Implementation Guide
V2R62023-12-183 of 64 findings match
M3
Microsoft Exchange 2019 Mailbox Server Security Technical Implementation Guide
V2R32025-05-143 of 66 findings match
M3
Web Server Security Requirements Guide
V4R42025-09-103 of 126 findings match
H1M2
Adobe ColdFusion Security Technical Implementation Guide
V1R12025-12-192 of 84 findings match
M2
IBM WebSphere Traditional V9.x Security Technical Implementation Guide
V2R12026-02-262 of 77 findings match
L2
Show 4 more STIGs in this category →Hide additional STIGs
IBM WebSphere Liberty Server Security Technical Implementation Guide
V2R42026-02-261 of 30 findings match
M1
JBoss Enterprise Application Platform 6.3 Security Technical Implementation Guide
V2R62025-02-201 of 67 findings match
M1
Microsoft IIS 10.0 Server Security Technical Implementation Guide
V3R72026-02-261 of 40 findings match
M1
Microsoft IIS 10.0 Site Security Technical Implementation Guide
V2R152026-02-261 of 44 findings match
H1
Virtualization / Container
8 STIGs
Virtualization / Container
8 STIGsVirtual Machine Manager Security Requirements Guide
V2R32025-09-104 of 198 findings match
M4
Nutanix Acropolis Application Server Security Technical Implementation Guide
V1R12026-02-243 of 31 findings match
M3
Container Platform Security Requirements Guide
V2R42025-09-102 of 188 findings match
H1M1
Nutanix Acropolis GPOS Security Technical Implementation Guide
V1R12026-02-242 of 106 findings match
H1M1
Kubernetes Security Technical Implementation Guide
V2R62026-02-121 of 92 findings match
M1
Red Hat OpenShift Container Platform 4.x Security Technical Implementation Guide
V2R52025-12-041 of 83 findings match
M1
VMware vSphere 8.0 vCenter Security Technical Implementation Guide
V2R32025-06-091 of 67 findings match
M1
VMware vSphere 8.0 vCenter Security Technical Implementation Guide
V1R12023-10-111 of 65 findings match
M1
Endpoint Security Management
4 STIGs
Endpoint Security Management
4 STIGsCentral Log Server Security Requirements Guide
V3R42026-02-121 of 127 findings match
M1
Dragos Platform 2.x Security Technical Implementation Guide
V1R62026-02-181 of 19 findings match
M1
Forescout Network Device Management Security Technical Implementation Guide
V2R32025-06-121 of 42 findings match
H1
Tanium 7.x Operating System on TanOS Security Technical Implementation Guide
V2R22025-02-111 of 31 findings match
M1
Productivity Application
2 STIGs
Productivity Application
2 STIGsMicrosoft Office 365 ProPlus Security Technical Implementation Guide
V3R52026-02-123 of 139 findings match
H1M2
Google Chrome Current Windows Security Technical Implementation Guide
V2R112025-05-151 of 46 findings match
M1
Uncategorized
2 STIGs
Uncategorized
2 STIGsMicrosoft Office System 2016 Security Technical Implementation Guide
22024-12-065 of 20 findings match
M5
Microsoft Internet Explorer 11 Security Technical Implementation Guide
22023-12-012 of 137 findings match
M2