Skip to content
compliancebase

Encryption in transit

Cryptographic protection for data moving across networks or service connections.

In practice

Require modern TLS, validate certificates, remove weak protocols, and inventory non-HTTP connections.

Common confusion

A private network is not a substitute for authenticated encryption.

Related controls

Framework versions referenced in this page:

Last verified: August 2026 · Primary sources linked above