Does Azure comply to NIST 800-111 standards

Question

Does Azure comply to NIST 800-111 standards

Kumar, Karunesh 1

Does encryption for data in rest in Azure storage comply to NIST 800-111 standards

Sumarigo-MSFT 47,526 Reputation points Microsoft Employee

2020-12-11T16:56:14.723+00:00

@Kumar, Karunesh This article https://learn.microsoft.com/en-us/azure/compliance/ covers compliance offerings that are applicable based on your region and organization.
Data in Azure Storage is encrypted and decrypted transparently using 256-bit AES encryption, one of the strongest block ciphers available, and is FIPS 140-2 compliant. Azure Storage encryption is similar to BitLocker encryption on Windows.

However, I am checking internally with the product team for more information, In meanwhile, you can also refer to Azure Compliance Offering
Sumarigo-MSFT 47,526 Reputation points Microsoft Employee

2020-12-16T14:56:51.103+00:00

@Kumar, Karunesh Can you provide more information on your query?
May I know what exactly are you trying to accomplish?
Additional information: 800-111 is a standard for end-user devices like laptops/desktops Smartphones and USB drives. Not cloud storage.

SP 800-111, Guide to Storage Encryption Technologies for End User Devices | CSRC (nist.gov)

You can manage their compliance via the MS Trust article above and also refer to our specific information on Azure Storage encryption for data at rest. Azure Storage encryption for data at rest | Microsoft Learn
Sumarigo-MSFT 47,526 Reputation points Microsoft Employee

2020-12-22T11:30:15.657+00:00

@Kumar, Karunesh Just checking in to see if you have had a chance to see the previous response. Could you share the above required information to understand/investigate this issue further? or if the above answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Your answer

Sumarigo-MSFT 47,526 Reputation points Microsoft Employee

2020-12-11T16:56:14.723+00:00

@Kumar, Karunesh This article https://learn.microsoft.com/en-us/azure/compliance/ covers compliance offerings that are applicable based on your region and organization.
Data in Azure Storage is encrypted and decrypted transparently using 256-bit AES encryption, one of the strongest block ciphers available, and is FIPS 140-2 compliant. Azure Storage encryption is similar to BitLocker encryption on Windows.

However, I am checking internally with the product team for more information, In meanwhile, you can also refer to Azure Compliance Offering
Sumarigo-MSFT 47,526 Reputation points Microsoft Employee

2020-12-16T14:56:51.103+00:00

@Kumar, Karunesh Can you provide more information on your query?
May I know what exactly are you trying to accomplish?
Additional information: 800-111 is a standard for end-user devices like laptops/desktops Smartphones and USB drives. Not cloud storage.

SP 800-111, Guide to Storage Encryption Technologies for End User Devices | CSRC (nist.gov)

You can manage their compliance via the MS Trust article above and also refer to our specific information on Azure Storage encryption for data at rest. Azure Storage encryption for data at rest | Microsoft Learn
Sumarigo-MSFT 47,526 Reputation points Microsoft Employee

2020-12-22T11:30:15.657+00:00

@Kumar, Karunesh Just checking in to see if you have had a chance to see the previous response. Could you share the above required information to understand/investigate this issue further? or if the above answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Share via

Does Azure comply to NIST 800-111 standards

Your answer