A grant requirement states the city must "protect Criminal Justice Information in transit." Which control set best follows from that stated requirement?
Select an answer to reveal the explanation.
Short Explanation
When the grant says protect CJI on the move, encrypt the ride, guard the keys, and watch the road—do not park the files on anonymous FTP and hope nobody notices the hostname.
Full Explanation
Controls should be derived from explicit security requirements. Protecting CJI in transit typically implies strong encryption, sound key management, and monitoring of those channels. Obscurity, unencrypted public storage, and disabled auditing conflict with confidentiality and accountability expectations for criminal justice data.