Curriculum · Phase 4 · Module 4.2

Cryptography + Encryption at Rest

The cryptography a GRC Engineer actually needs: symmetric vs asymmetric vs hashing and what each is for, envelope encryption, and how cloud KMS (AWS, GCP, Azure) turns "data must be encrypted at rest" into a key policy, a rotation schedule, and an access log you can hand to an auditor.