Karen Scarfone co-authored NIST’s encryption guidance. Organizations should implement fundamental policies underlying the decisions surrounding encryption, she says. Authentication and encryption also go hand-in-hand with encryption, Scarfones says. “Ideally, you want to make it as transparent to the user as you can,” she says. “You need to look at your situation and what you need to do is do that risk-based assessment” She says encryption is not too hard or too expensive to implement.”]
Source: https://www.cuinfosecurity.com/encryption-unified-approach-a-5628