NIST CSF 2.0 · derived mapping target
PR.DS-02Data-in-transit protected
Protect data while it moves across networks, typically with encryption, so it cannot be intercepted or altered on the way.
Mapping at a glance
PR.DS-02Data-in-transit protectedNIST CSF 2.0
PR.DS-02 is covered by 24 Sekit CSF controls. +19 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0094Encryption at rest · PolicyRCF-0095Encryption at rest · ProcessRCF-0096Encryption at rest · TechnicalRCF-0097Encryption in transit · PolicyRCF-0098Encryption in transit · ProcessRCF-0099Encryption in transit · TechnicalRCF-0100Key management · PolicyRCF-0101Key management · ProcessRCF-0102Key management · TechnicalRCF-0103DLP monitoring · PolicyRCF-0104DLP monitoring · ProcessRCF-0105DLP monitoring · TechnicalRCF-0112Secrets management · PolicyRCF-0113Secrets management · ProcessRCF-0114Secrets management · TechnicalRCF-0163Disk encryption · PolicyRCF-0164Disk encryption · ProcessRCF-0165Disk encryption · TechnicalRCF-0181TLS termination/hardening · PolicyRCF-0182TLS termination/hardening · ProcessRCF-0183TLS termination/hardening · TechnicalRCF-0340KMS & HSM · PolicyRCF-0341KMS & HSM · ProcessRCF-0342KMS & HSM · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
TLS and secure-DNS review
The proof that the company's websites and services use strong encryption (up-to-date HTTPS/TLS) and that DNS is protected against tampering.
Encryption standards evidence
The proof that sensitive data is encrypted when stored (databases, storage) and when transmitted (encrypted connections).
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves PR.DS-02?”
Also via MCP, free with account