SIG Lite
Control BCM-05
Extractive Review Standard
How to answer 'Are database and volume backups encrypted?' on a SIG Lite
Reviewer Guidance & Pitfalls
Confirm backups are encrypted using the same or separate KMS master keys as primary storage, both in-transit during replication and at rest in backup repositories.
Example Answer Passing Enterprise Audit
Compliant Response Template
Yes. All automated snapshots and database backups are encrypted at rest using AES-256 via AWS KMS and replicated securely to secondary storage buckets (SOC 2, A1.2).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
Zero spam. 100% confidential. No credit card required.