The National Institute of Standards and Technology (NIST) has issued FIPS 140-2 [PDF - 1.4 MB], Security Requirements for Cryptographic Modules. FIPS 140-2 refers to the Federal Information Processing Standards Publication (FIPS) for Computer Security. Although it is a U. S. government computer security standard, many private sector organizations use the information as a guide. In addition, encrypting the data on your mobile device with a valid encryption process consistent with FIPS 140-2 can help you meet HHS Guidance to Render Unsecured Protected Health Information Unusable, Unreadable, or Indecipherable to Unauthorized Individuals.
Are there any standards for encryption?
Content last reviewed on February 8, 2018