Encryption in transit
Cryptographic protection for data moving across networks or service connections.
In practice
Require modern TLS, validate certificates, remove weak protocols, and inventory non-HTTP connections.
Common confusion
A private network is not a substitute for authenticated encryption.