Confidentiality

Confidentiality ensures only authorized users see stored and transmitted information. In addition to the documentation included with other applications and hardware components, follow the EnterpriseTrack-specific guidance below:

• For data in transit, use TLS with recommended and strong cipher suites to protect network connections among modules. If you use LDAP or SSO authentication, ensure you use LDAPS to connect to the directory server.
• For data at rest, refer to the documentation included with the database server for instructions on securing the database.
• For encryption in transit, use HTTPS by default.