Can you describe the two main types of data protection?

Being able to discuss how to protect both data-at-rest and data-in-transit is a key requirement for an information security manager. Since the methodologies used for each of these categories differ, and all organizations have both types of data, you need to demonstrate your ability to do this. Discussing the specific processes you use to protect data on the network and the data on the organization's systems will be a key element of any interview you attend.

"As an information security manager, I need to protect data-in-transit and data-at-rest. This includes the data being transmitted across the company's network, as well as the data residing on the company's servers and storage systems. Some methods to project the stored data include user authentication, firewalls, and encryption. Protecting data being transmitted across the network involves strong encryption, network monitoring, and using private networks rather than the Internet or shared networks to transmit the data."