← CIS Controls v8 in plain English

3.10 IG2

Control 3 / Data Protection

Encrypt Sensitive Data in Transit

Think of it likeUsing a locked box to send sensitive documents through the mail.

In plain English

While sensitive data is in transit, it is encrypted so it cannot be read if someone intercepts it along the way.

Related CSF subcategories (unofficial mapping)

PR.AA-04: Identity assertions are protected, conveyed, and verified.PR.DS-02: The confidentiality, integrity, and availability of data-in-transit are protected.