# Data protection
<a name="data-protection"></a>


| SCSEC08: How do you manage and protect encryption keys used within your supply chain systems? | 
| --- | 
|   | 

 Encryption keys are critical security assets that protect sensitive supply chain data both at rest and in transit. Proper key management supports data confidentiality and integrity across your supply chain network, while helping to prevent unauthorized access to protected information. 


| SCSEC09: How do you classify and handle sensitive supply chain data (for example, product designs, pricing, and logistics)? | 
| --- | 
|   | 

 Supply chains process various types of sensitive data that require different levels of protection. Proper classification and handling of this data is essential to apply appropriate security controls, meet compliance requirements, and help prevent competitive disadvantages from data breaches. 


| SCSEC10: How are you encrypting supply chain data at rest and in transit across different environments? | 
| --- | 
|   | 

 Encryption is a fundamental security control for protecting supply chain data as it moves through various systems and networks. Implementing comprehensive encryption strategies safeguards sensitive information from unauthorized access and helps maintain compliance with industry regulations. 

**Topics**
+ [SCSEC08-BP01 Implement strong key management in your supply chain systems](scsec08-bp01.md)
+ [SCSEC09-BP01 Implement data classification and protection](scsec09-bp01.md)
+ [SCSEC10-BP01 Implement comprehensive data encryption](scsec10-bp01.md)