[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Fpr-ds":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","pr-ds","PR.DS-1","Data Security",561,"US National Institute of Standards and Technology (NIST)","**What it asks for.** This Protect category requires that data is managed in line with the organisation's risk strategy to protect its confidentiality, integrity and availability. It covers data at rest, in transit and in use, integrity checks and, in CSF 2.0, backups.\n\n**In practice.** Sensitive data is encrypted at rest and in transit, integrity mechanisms detect unauthorised changes, data leakage is controlled, development and production environments are separated, and backups are created, protected and tested. Controls are applied according to classification. Evidence includes encryption configurations, key management procedures, DLP policies and backup test records.\n\n**Common gaps.** Encryption coverage is often assumed rather than verified, especially in cloud storage and SaaS. Data in use and data shared with third parties receive less attention than data in storage.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},483,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"government-encryption-backdoors-threaten-global-data-security","Government Encryption Backdoors Threaten Global Data Security","2026-10-17T14:20:19.334+00:00",{"slug":24,"title":25,"published_at":26},"stolen-credentials-expose-metas-github-repos-and-personal-data","Stolen Credentials Expose Meta's GitHub Repos and Personal Data","2026-10-13T18:21:42.163+00:00",{"slug":28,"title":29,"published_at":30},"p7-darksword-ios-exploit-kit-targets-crypto-wallets-and-keychain-data","P7 DarkSword iOS Exploit Kit Targets Crypto Wallets and Keychain Data","2026-10-09T18:20:57.498+00:00",{"slug":32,"title":33,"published_at":34},"organizations-must-begin-testing-post-quantum-certificate-ecosystems-now","Organizations Must Begin Testing Post-Quantum Certificate Ecosystems Now","2026-10-08T22:21:07.63+00:00",{"slug":36,"title":37,"published_at":38},"china-linked-hackers-built-commercial-portal-to-resell-stolen-government-emails","China-Linked Hackers Built Commercial Portal to Resell Stolen Government Emails","2026-10-08T20:21:18.219+00:00",{"slug":40,"title":41,"published_at":42},"quantum-computing-threatens-todays-encryption-act-now","Quantum Computing Threatens Today's Encryption — Act Now","2026-10-08T12:21:46.771+00:00",{"slug":44,"title":45,"published_at":46},"advantest-ransomware-attack-exposes-pii-including-ssns-and-financial-data","Advantest Ransomware Attack Exposes PII Including SSNs and Financial Data","2026-10-07T12:21:12.164+00:00",{"slug":48,"title":49,"published_at":50},"shinyhunters-arrests-highlight-dangers-of-large-scale-credential-theft","ShinyHunters Arrests Highlight Dangers of Large-Scale Credential Theft","2026-10-06T10:20:20.441+00:00",{"slug":52,"title":53,"published_at":54},"killsec-extortion-group-dismantled-in-10-country-operation","KillSec Extortion Group Dismantled in 10-Country Operation","2026-10-01T20:20:32.296+00:00",{"slug":56,"title":57,"published_at":58},"pentagon-agency-exposes-3-million-records-on-unencrypted-file-sharing-server-for-nine-months","Pentagon Agency Exposes 3 Million Records on Unencrypted File-Sharing Server for Nine Months","2026-09-29T14:21:05.717+00:00",{"slug":60,"title":61,"published_at":62},"cloudflare-container-flaw-exposed-cross-tenant-data-via-unzeroed-storage-blocks","Cloudflare Container Flaw Exposed Cross-Tenant Data via Unzeroed Storage Blocks","2026-09-27T20:20:39.506+00:00",{"slug":64,"title":65,"published_at":66},"docker-botnet-ai-key-theft-and-water-utility-credential-exposure-highlight-critical-security-gaps","Docker Botnet, AI Key Theft, and Water Utility Credential Exposure Highlight Critical Security Gaps","2026-09-25T20:21:17.453+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",190,{"slug":74,"name":75,"problem":76,"stories":77},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",174,{"slug":79,"name":80,"problem":81,"stories":82},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",114,{"slug":84,"name":85,"problem":86,"stories":87},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",79,{"slug":89,"name":90,"problem":91,"stories":92},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",53,{"slug":94,"name":95,"problem":96,"stories":97},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",49,[99,105,111,116,121,126,131,136],{"family":100,"item":101,"code":102,"title":103,"together":104},"gdpr","32","Article 32","Security of processing",345,{"family":106,"item":107,"code":108,"title":109,"together":110},"cis","3","Control 3","Data Protection",342,{"family":106,"item":112,"code":113,"title":114,"together":115},"6","Control 6","Access Control Management",230,{"family":5,"item":117,"code":118,"title":119,"together":120},"pr-ac","PR.AC-1","Identity Management, Authentication and Access Control (CSF 1.1)",189,{"family":100,"item":122,"code":123,"title":124,"together":125},"25","Article 25","Data protection by design and by default",162,{"family":106,"item":127,"code":128,"title":129,"together":130},"13","Control 13","Network Monitoring and Defense",146,{"family":5,"item":132,"code":133,"title":134,"together":135},"de-cm","DE.CM-1","Continuous Monitoring",90,{"family":100,"item":137,"code":138,"title":139,"together":140},"33","Article 33","Notification of a personal data breach to the supervisory authority",84]