3 — Data Protection
14 safeguards in the Data Protection control
3.1Establish and Maintain a Data Management Process
3.2Establish and Maintain a Data Inventory
3.3Configure Data Access Control Lists
3.4Enforce Data Retention
3.5Securely Dispose of Data
3.6Encrypt Data on End-User Devices
3.7Establish and Maintain a Data Classification Scheme
3.8Document Data Flows
3.9Encrypt Data on Removable Media
3.10Encrypt Sensitive Data in Transit
3.11Encrypt Sensitive Data at Rest
3.12Segment Data Processing and Storage Based on Sensitivity
3.13Deploy a Data Loss Prevention Solution
3.14Log Sensitive Data Access