 Furthermore, management should attest that encryption policies ensure data protection at the desired level and verify that the cost of encrypting the data does not exceed the value of the information itself.All data that is required to be maintained for an extensive amount of time should be encrypted and transported to a remote location.Procedures should be in place to guarantee that all encrypted sensitive information arrives at its location and is stored properly.