How to answer 'Are database and volume backups encrypted?' on a SIG Lite
I. Reviewer Guidance & Pitfalls
Confirm backups are encrypted using the same or separate KMS master keys as primary storage, both in-transit during replication and at rest in backup repositories.
II. Example Answer Passing Enterprise Audit
Compliant Response
Sealed · BCM-05
Yes. All automated snapshots and database backups are encrypted at rest using AES-256 via AWS KMS and replicated securely to secondary storage buckets (SOC 2, A1.2).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire drafts answers with citations pulled directly from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
No spam · No credit card · Confidential by default