A.3
A.3.1
Data encryption at rest
TDE on databases, storage volume encryption, backup encryption.
3–5 daysfrom 1,320 €
A.3.2
Data encryption in transit
TLS 1.3 deployment, HSTS, mTLS between microservices.
2–3 daysfrom 1,320 €
A.3.3
Pseudonymization and anonymization
Data masking for test environments, PAN tokenization.
3–5 daysfrom 1,320 €
A.3.4
Access management (IAM)
RBAC/ABAC, MFA, key rotation, orphan account cleanup.
5–10 daysfrom 1,920 €
A.3.5
Tamper-proof audit logs
Centralized log collection (ELK/Loki), WORM storage, event correlation.
5–8 daysfrom 1,560 €