The use of cryptographic modules validated to NIST FIPS 140-2 is required by the United States Government for encryption of all data that has a classification of Sensitive but Unclassified (SBU) or above.
The use of cryptographic modules meeting the requirements of NIST FIPS 140-2 is mandated for encryption of data classified as Sensitive but Unclassified (SBU) or higher by the United States Government.