Data protection

SQL Server missing BYOK encryption

Platform(s)
Compliance Frameworks

Azure CIS, Brazilian General Data Protection (LGPD), CCPA, coppa, CPRA, Data Security Posture Management (DSPM) Best Practices, GDPR, HITRUST, iso_27001_2022, iso_27002_2022, Microsoft Cloud Security Benchmark, Mitre ATT&CK, New Zealand Information Security Manual, NIST 800-171, NIST 800-53, PDPA, pipeda

Description

In {AzureSqlDbServer} BYOK is missing. TDE with Customer-managed key support provides increased transparency and control over the TDE Protector, increased security with an HSM-backed external service, and promotion of separation of duties.