Do items that contain encryption which is either not used or is not enabled require a review against Category 5 Part 2 criteria?
Items that contain encryption which is either not used or dormant are considered encryption items requiring review against Category 5 Part 2. 7. Do items that do not contain encryption but which make use of encryption already present in other items, such as software applications that call up cryptographic libraries, require a review against Category 5 Part 2? Items that do not contain encryption but which make use of encryption already present in other items are considered encryption items requiring review against Category 5 Part 2.