using weaknesses such as insecure permissions (CWE-732). [R.311.1]
Ensure that encryption is properly integrated into the system design, including but not
necessarily limited to:
Encryption that is needed to store or transmit private data of the users of the system