Secure Algorithm List IT Security Standard

If your organization has established a need for securing business data through the use of cryptography in data encryption, data hashing, and data masking, this secure algorithm list is a useful standard. These security controls are prescribed in the Data Classification Standard, Data Handling Guidelines, and [Company Name] Security policies and standards. This supporting Secure Algorithm List (“SAL”) Standard has been developed to ensure that the organization’s cryptographic and masking practices are effective and are not prone to evolving security threats, emerging cryptanalysis techniques, and/or cryptographic attacks. The SAL is aligned with organizational objectives, Industry best practice guidelines, and where possible the objectives defined by the Payment Card Industry Data Security (PCI DSS) Standard.

This supporting Standard is applicable to all users and systems that are bound by the organizations' policies and standards

Appropriate data security controls reduce the likelihood (and impact) of data breach incidents during various phases of the data lifecycle. The purpose of this standard is to set out the rules for securing the companies' data during transmission and storage. This document provides best practice recommendations on information security management for use by those responsible for initiating, implementing or maintaining information security management systems (ISMS).

Nowadays, with the digitalization of our society, the need for data protection became more important. The latest IT Security Standards involve the application of technology to broader social and institutional contexts, and thereby contributes to the servitization of companies, and affects how they compete and interact. This document contains security technology solutions to protect data classified as “Highly Sensitive”, “Sensitive”, “Private” or “Public” as per the Data Classification Standard and Data Handling Guidelines. Specifically: