6.1.1 TODO

Verify that regulated private data is stored encrypted while at rest, such as personally identifiable information (PII), sensitive personal information, or data assessed likely to be subject to EU’s GDPR.

Level 1
Level 2	X
Level 3	X

CWE	NIST
311