Cloud SQL instances should have SSL enabled

SOC 2

• CC6.7 The entity restricts the transmission, movement, and removal of information to authorized internal and external users and processes, and protects it during transmission, movement, or removal to meet the entity's objectives

PCI DSS v4.0

• 1.2.5: Network security controls (NSCs) are configured and maintained.
• 1.2.8: Network security controls (NSCs) are configured and maintained.
• 2.2.5: System components cannot be compromised by exploiting insecure services, protocols, or daemons
• 2.2.7: System components are configured and managed securely.
• 4.2.1: PAN is protected with strong cryptography during transmission.

ISO/IEC 27001:2022

• A.8.12 Data leakage prevention

NIS2 Directive (EU 2022/2555)

• 12 Asset management

NIST Cybersecurity Framework v2.0

• PR.AA-04
• PR.DS-02

CIS GCP Benchmark v3.0.0

• 6.4 Ensure That the Cloud SQL Database Instance Requires All Incoming Connections To Use SSL

CIS GCP Benchmark v4.0.0

• 6.4 Ensure That the Cloud SQL Database Instance Requires All Incoming Connections To Use SSL

BSI C5:2025

• COS-02.01B Specific security requirements are designed, published and provided for establishing connections within the cloud service provider's network. The security requirements define for the cloud service provider's area of responsibility: - In which cases the security zones are to be...
• COS-03.02B Physical and virtualised network environments are designed and configured to restrict and monitor the established connection to trusted or untrusted networks according to the defined security requirements.
• COS-08.02B Technical measures outlined in the documented policies and instructions to protect the transmission of data are implemented. These measures are regularly verified to maintain their operating effectiveness.
• CRY-04.01AS The cloud service provider has established procedures and technical measures for state-of-the-art encryption and authentication for the transmission of all data.
• CRY-04.01B The cloud service provider has established procedures and technical measures for state-of-the-art encryption and authentication for the transmission of cloud service customer data and cloud service derived data both to or by the cloud service provider over public networks. The cloud...

CIS GCP Benchmark v2.0.0

• 6.4 It is recommended to enforce all incoming connections to SQL database instance to use SSL.

HIPAA Security Rule 2003

• 164.312(e)(1) Transmission security
• 164.312(e)(2)(ii) Encryption

PCI DSS v3.2.1

• Use strong cryptography and security protocols to safeguard sensitive cardholder data during transmission over open, public networks