Section 11.8.1 Top Level Accessing External Services (Web Services, Directories, Databases, OS) Sub Level 11.8 Encryption General Follow Encryption best practices as defined in Section 6 of this document.