Common use of Encryption of Data at Rest Clause in Contracts

Encryption of Data at Rest. The Contractor shall ensure hard drive encryption consistent with validated cryptography standards as referenced in FIPS 140-2, Security Requirements for Cryptographic Modules for all Personal Data, unless the Purchasing Entity approves in writing for the storage of Personal Data on a Contractor portable device in order to accomplish work as defined in the statement of work.

Encryption of Data at Rest. The Contractor shall ensure hard drive encryption consistent with validated cryptography standards as referenced in FIPS 140-2, Security Requirements for Cryptographic Modules for all Personal DataData as identified in the SLA, unless the Contractor presents a justifiable position that is approved by the Purchasing Entity approves in writing for the storage of that Personal Data Data, is required to be stored on a Contractor portable device in order to accomplish work as defined in the statement scope of work.

Encryption of Data at Rest. The Contractor shall ensure hard drive encryption consistent with validated cryptography standards as referenced in FIPS 140-2140‐2, Security Requirements for Cryptographic Modules for all Personal Data, unless the Purchasing Entity approves in writing for the storage of Personal Data on a Contractor portable device in order to accomplish work as defined in the statement of work.

Encryption of Data at Rest. The Contractor shall ensure hard drive encryption consistent with validated cryptography standards as referenced in FIPS 140-2, Security Requirements for Cryptographic Modules for all Personal Datapersonal data, unless the Purchasing Entity City approves in writing for the storage of Personal Data personal data on a Contractor portable device in order to accomplish work as defined in the statement of work.

Encryption of Data at Rest. The Contractor shall ensure hard drive encryption consistent with validated cryptography standards as referenced in FIPS 140-2, Security Requirements for Cryptographic Modules for all Personal Confidential Data, unless the Purchasing Entity State approves in writing for the storage of Personal Confidential Data on a Contractor portable device in order to accomplish work as defined in Contract work. A minimum of AES-256 or better is acceptable to the statement of workState.