Which is the BEST control to meet the Statement on Standards for Attestation Engagements 18 (SSAE-18) confidentiality category?

The correct answer is B. Storage encryption. The confidentiality category of SSAE-18 is focused on ensuring that sensitive data remains confidential and is protected from unauthorized access or disclosure. Storage encryption ensures that data is encrypted while at rest, meaning even if an attacker gains access to the physic

Submitted by noor.lb· Mar 5, 2026Security Architecture and Engineering

Question

Options

AData processing
BStorage encryption
CFile hashing
DData retention policy

How the community answered

(48 responses)

A
4% (2)
B
85% (41)
C
8% (4)
D
2% (1)

Explanation

The confidentiality category of SSAE-18 is focused on ensuring that sensitive data remains confidential and is protected from unauthorized access or disclosure. Storage encryption ensures that data is encrypted while at rest, meaning even if an attacker gains access to the physical storage or database, they won't be able to read the data without the decryption keys. This directly addresses the need to protect the confidentiality of sensitive data.

Topics

#SSAE-18#confidentiality#storage encryption#data at rest encryption

Community Discussion

No community discussion yet for this question.

Full CISSP Practice