Description Data at rest containing personal or business-critical data is encrypted using an approved algorithm. Context Weight 1 Control area Cryptography & encryption MOSCOW Must Control Framework NIS2