View a markdown version of this page

MIDASEC03-BP04 Implement industrial encryption policies - Modern Industrial Data Technology Lens
Implementation guidanceResources

MIDASEC03-BP04 Implement industrial encryption policies

Apply encryption policies across all layers of the manufacturing data system, including at rest, in transit, and optionally during processing, to help protect sensitive operational and proprietary information.

Desired outcome: Data remains encrypted end-to-end, providing confidentiality and integrity and helping with regulatory alignment.

Benefits of establishing this best practice: Reduces impact of data breaches, supports regulatory compliance, and builds trust with partners and customers.

Level of risk exposed if this best practice is not established: High

Implementation guidance

Use AWS KMS for key management and enforce encryption using S3 bucket policies, VPC security, and service-level configurations.

Implementation steps

  • Enable default encryption on all data stores (for example, Amazon S3, Amazon RDS, Amazon Redshift, and Amazon DynamoDB).

  • Use TLS 1.2+ for all data in transit.

  • Create customer-managed keys (CMKs) using AWS KMS for sensitive workloads.

  • Regularly rotate keys and audit access with AWS CloudTrail.

Resources