and help prevent unauthorized review, redistribution, and modification of sensitive Government information. While protections at the network level remain essential, adding protection at the data level is critical to achieving defense in depth. v. Encryption Services: x Encryption as a shared service could help ensure consistent application of security policies and potentially provide delivery of a range of cryptographic capabilities. If operationalized, this shared service could also leverage, and may require updates to the existing Federal Public Key Infrastructure (PKI). Proposals for this service offering may also include new requirements for employing web encryption (HTTPS), digitally signed email, and default encryption for sensitive information held by Federal civilian agencies. Page 13 of 21