PR.DS Data security

Data Security: protecting data at rest, in transit and in use, and backups; four Subcategories (PR.DS-01, PR.DS-02, PR.DS-10 and PR.DS-11).

PR.DS-01 Data at rest

Protecting stored data with encryption, signatures and hashes, full disk encryption on endpoints, software signature validation and removable media controls.

PR.DS-02 Data in transit

Protecting data in transit with encryption and signatures, blocking or encrypting outbound sensitive data, blocking personal email and file sharing, and keeping production data out of non-production environments.

PR.DS-10 Data in use

Protecting data while it is processed: removing confidential data from memory and processors once it is no longer needed and isolating it from other users and processes on the same platform.

PR.DS-11 Backups

Creating, protecting, maintaining and testing backups: near-real-time backup of critical data, restore tests at least annually, offline and offsite copies and geographic separation.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.
Book a callhello@deployopen.com