← CIS Controls v8 in plain English

3.8 IG2

Control 3 / Data Protection

Document Data Flows

Think of it likeMapping out how information moves through the house, like how mail gets from the mailbox to the right person.

In plain English

Whenever data moves through their systems, the household documents the path, mapping where it is stored, processed, and sent.

Related CSF subcategories (unofficial mapping)

ID.AM-03: Representations of the organization's authorized network communication and internal and external network data flows are maintained.