Acceptable Encryption Policy Preview

ACCEPTABLE ENCRYPTION POLICY
_COMPANY_NAME_

═══════════════════════════════════════════════════════════════════
PURPOSE & SCOPE
═══════════════════════════════════════════════════════════════════

This policy applies to all _COMPANY employees, contractors, vendors, and business partners.

═══════════════════════════════════════════════════════════════════
POLICY RULES
═══════════════════════════════════════════════════════════════════

1. ENCRYPTION REQUIREMENTS FOR DATA IN TRANSIT
   □ All Confidential or Restricted data must be encrypted when transmitted
   □ Applies to all public-access channels and third-party transports
   □ Includes both electronic transmission and physical media transport

2. VOIP FAXING REQUIREMENTS
   □ Confidential/Restricted data faxed over VoIP may require encryption
   □ Depends on specific technology implementation
   □ Consult IT Department for current requirements

3. ENCRYPTION FOR HIGH-RISK SYSTEMS
   □ Mandatory encryption for all Restricted data on:
     • Laptops and notebooks
     • Portable storage devices (USB, external drives)
     • Personal communication devices (smartphones, tablets)
   □ Risk assessment determines "high-risk" classification

4. PRODUCTION SYSTEM PROTECTION
   □ Disabling encryption on production systems is PROHIBITED
   □ Prior approval from IT Department required for any exceptions
   □ All changes must be documented and audited

5. ENCRYPTION-DEFEATING TOOLS
   □ Storage of encryption-defeating tools on company systems prohibited
   □ Exception only for authorized IT Department testing
   □ Testing must be documented and approved in advance