PR.DS-02:

The confidentiality, integrity, and availability of data-in-transit are protected

Implementation Examples

Ex1:

Use encryption, digital signatures, and cryptographic hashes to protect the confidentiality and integrity of network communications

Ex2:

Automatically encrypt or block outbound emails and other communications that contain sensitive data, depending on the data classification

Ex3:

Block access to personal email, file sharing, file storage services, and other personal communications applications and services from organizational systems and networks

Ex4:

Prevent reuse of sensitive data from production environments (e.g., customer records) in development, testing, and other non-production environments