*4.4.3 Data-in-transport, data-at-rest, data-in-use*

The protection of sensitive information is fundamental to risk management. Data-in-motion is the transfer of material between endpoints. This category changes frequently and includes industry best practices in how to transmit the information, such as confidentiality controls and integrity controls during message transmission. Once information is stored on a system, it is referred to as data-atrest. Lastly, data-in-use refers to messages in memory. Historically, a concern of data-in-use is that processes and other virtualized components could have improper access to the information.
