ASSOCIATED DRATA CONTROL
This test is part of the Cryptography Policies control that ensures your company has an established policy and procedure that governs the use of cryptographic controls.
WHAT TO DO IF A TEST FAILS
If Drata finds that a Cryptography/Encryption policy either does not exist or if the renewal date on the policy has passed, the test will fail.
To remediate a failed test, you will need to either upload or build a Cryptography/Encryption policy within Drata, set a renewal date that aligns with your compliance program goals, and notify the owner to click 'Approve Policy' as soon as possible.
HELPFUL RESOURCES