Encryption Policy

The Encryption Policy provides guidance on the use of encryption technologies to protect data, information resources, and confidential or personally identifiable information (PII). The policy's purpose is to ensure compliance with regulations and safeguard sensitive information from unauthorized access and provides guidance on encrypting data stored on portable devices to mitigate risks in case of loss or theft, encrypting data during transmission. It applies to staff members involved in handling confidential information or PII and covers encryption for data at rest and in transit, including encryption key management.