Question OPDC-05
Is sensitive data encrypted in transport (e.g., system to client)?
| Weight | 40 |
| High Risk | Yes |
| Required | Yes |
| Compliant Answer | Yes |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
Decribe why sensitive data is not encrypted in transport.
Answering "YES"
Summarize your transport encryption strategy.
Reason for Question
The need for encryption in transport is unique to your institution's implementation of a system. In particular, system components, architectures, and data flows all factor into the need for this control.
Follow-Up Inquiries
Follow-up inquiries for data encryption in transport will be institution/implementation specific.
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]