Encryption transforms readable data into a protected form that requires a key or equivalent mechanism to recover. In enterprise GenAI systems, protect sensitive data both at rest and in transit. section 11.4.8 section 10.2.2
Apply encryption as part of a broader security baseline:
- Protect data in transit with TLS. section 11.4.8
- Use cloud-provider encryption features to protect data at rest. section 11.4.8
- Pair encryption with access controls, audits, and other privacy measures. section 10.2.2
Encryption is one security control, not a substitute for access management or compliance work. Protect sensitive data while limiting collection and processing to what is necessary. section 10.2.2 section 8.4.1















