All production data is encrypted at rest using AES-256 via AWS KMS with customer-managed keys . Keys are automatically rotated every 90 days on an enforced schedule . Database backups and object storage inherit the same KMS keys and rotation policy .
145/279 answered · 96 approved · 134 open · 14 need evidence
280 of 280 questions
D.1.4· D. Incident Response· Required
How frequently are privileged access rights reviewed, and who performs the review?
Prior approved answer
Globex — CAIQ v4 · Feb 12Data at rest is encrypted with AES-256 using AWS KMS. Encryption keys are managed through KMS and rotated on a quarterly basis.
jknavigateaapproveeeditrregenerateccycle citations/filter?all shortcuts