Control Strategy DataFlowEncryptionToProcess

URI: CSG-DataFlowEncryptionToProcess

Package: DataLifecycle

< prev | next >

Description: The data Data sent by FlowsFrom to Process is encrypted end-to-end (i.e. not relying on transport level encryption).

Blocked Threats (2)

DS.T.HPDFDAuDS-V.6

Encrypted data Data stored on Host cannot be updated by Process with unencrypted input from FlowsFrom: process Process manages an encrypted stored copy of data Data on Host, so if the flows of updates from FlowsFrom is not encrypted, then Process cannot update this copy of Data without a key, so this copy will become out of date.

D.GDPR.DSHuoO.1

Personal data Data related to DataSubject is communicated across borders: since the data subject DataSubject is subject to the GDPR, their data Data it should not be communicated via process Process in jurisdiction RemoteJurisdiction that does not enforce the GDPR or equivalent protection, without suitable protection measures.