# NIST 800-171 3.1.13 Employ cryptographic mechanisms to protect the confidentiality of remote access sessions.

- Source: https://support.icompaas.com/support/solutions/articles/62000229245-nist-800-171-3-1-13-employ-cryptographic-mechanisms-to-protect-the-confidentiality-of-remote-access-s
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [NIST](https://support.icompaas.com/support/solutions/62000112528) › [800-171](https://support.icompaas.com/support/solutions/folders/62000168440)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description:**

Cryptographic standards include FIPS-validated cryptography and NSA-approved cryptography. See \[NIST CRYPTO\]; \[NIST CAVP\]; \[NIST CMVP\]; National Security Agency Cryptographic Standards. 

  

**Priority:** High 

  

**Category: Network Security** 

  

**Services Associated with AWS:** 

-   AWS Key Management Service (KMS), AWS Certificate Manager, AWS VPN, AWS Direct Connect

  

**Objective Evidence:** 

-   Administrative: documented policies, standards & procedures 
-   Administrative: supporting documentation to demonstrate the "secure practices" used to build technology platform-specific secure baseline configurations 
-   Technical: screen shot of firewall/VPN settings  
    

  

**Possible Technology Considerations:** 

-   **VPN Concentrator Secure Baseline Configurations (SBC)** 

  

**What needs to be answered:**

Do applications that are used for remote access use encryption methods to protect the remote access sessions? (Must be FIPS 140 encryption)

  

-   Ensure Cryptographic Protection of Remote Access Sessions  
    Description: This check verifies that cryptographic mechanisms are used to maintain the confidentiality of remote access sessions. Cryptographic standards should include FIPS-validated cryptography and NSA-approved cryptography.  

  

**More details:** Remote access sessions use FIPS validated encryption for connection to CUI containing systems.

## Related compliance guidance

- [NIST SP 800-53 Rev. 5: a practical implementation guide for cloud teams](https://support.icompaas.com/compliance/nist-sp-800-53-rev-5): How the 800-53 catalogue, baselines and the Risk Management Framework fit together, and which controls take the most work in the cloud.
- [NIST SP 800-171 and CMMC: a practical guide to protecting CUI in the cloud](https://support.icompaas.com/compliance/nist-sp-800-171-rev-3): If the driver is a DoD or federal contract handling CUI, 800-171 (and CMMC) is the scope you actually need.