Common use of Encryption of Data at Rest Clause in Contracts

Encryption of Data at Rest. Covered Defense Information (CDI) and Covered Contractor Information Systems (CCIS) are defined within clause 252.204-7012. Information at rest is defined as the state of information when it is not in process or in transit and is located on storage devices as specific components of systems. On all CCISs, the Contractor shall encrypt CDI at rest in accordance with NIST 800-171.