# Data protection
<a name="data-protection"></a>

 Organizations should implement robust encryption methods for data in transit, establish clear access control policies that work consistently across hybrid boundaries. 


| HNSEC05: How do you protect sensitive data in transit between on-premises and cloud environments? | 
| --- | 
|   | 

 Encrypting sensitive data traffic to connect to cloud networks over the internet or over a private network connection for their hybrid networking workloads is important to ensure that an unauthorized person or entity is unable to gain access to your data. 

**Topics**
+ [HNSEC05-BP01 Use IPSec VPN over Internet](hnsec05-bp01.md)
+ [HNSEC05-BP02 Use MACsec encryption for dedicated connections](hnsec05-bp02.md)
+ [HNSEC05-BP03 Use application layer encryption](hnsec05-bp03.md)