PR.DS-02 - Securing Data-in-Transit

PR.DS-02 secures data-in-transit—moving across networks or communications—using encryption and integrity checks like digital signatures to prevent interception or alteration. This includes blocking or encrypting sensitive outbound emails and restricting access to personal communication tools on organizational systems. It ensures data remains protected during transmission.

This subcategory mitigates risks like eavesdropping or data leaks by enforcing secure channels and preventing sensitive data reuse in non-production environments. It aligns with risk priorities, applying stronger controls to high-value transmissions. PR.DS-02 safeguards data as it travels within and beyond the organization.