How will the Department ensure sensitive data at rest is encrypted?
The DON strategy is to implement a software-based enterprise solution for encrypting data at rest. We are working with the Navy, Marine Corps and the NMCI team to evaluate the products that were awarded blanket purchase agreements under the auspices of the Department of Defense Enterprise Software Initiative/SmartBUY program. We’ll determine which of these products is most suitable to meet the needs of our warfighters and warfighting-support personnel. Once we have identified this solution set, we will notify the entire Department and provide detailed information about the associated timelines for delivery and implementation. Our goal is to begin implementing mandatory encryption of data at rest as soon as possible. Additionally, because of increased interconnectivity and interdependency of systems and networks between the DON and DoD information management and information technology environments, we are also tracking closely the test and evaluation efforts of the other services and DI