Types of data in cybersecurity

Definition: Data that is actively being transmitted over networks or used by applications.
Examples:
- Emails, instant messages
- API requests/responses
- Cloud-stored documents accessed via the web
Cybersecurity Focus:
- Encryption in transit (TLS/SSL, VPN)
- Network security (firewalls, IDS/IPS)
- Secure authentication

Definition: Data that is stored on physical media or databases and is not actively being transmitted.
Examples:
- Files on local drives or external storage
- Backup tapes or databases
- Encrypted USB drives
Cybersecurity Focus:
- Encryption at rest
- Access controls and permissions
- Physical security of storage devices

Definition: Any data that, if exposed, could lead to harm, legal consequences, or security breaches.
Examples:
- Personally Identifiable Information (PII): Name, SSN, address
- Financial information: Bank account numbers, credit card info
- Government or military classified information
- Health records (HIPAA-protected)
Cybersecurity Focus:
- Strict access controls
- Encryption (at rest and in transit)
- Auditing and monitoring access
- Data classification and labeling

💡 Summary Table:

Data Type	Where It Exists	Examples	Security Focus
Online Data	Active use / in transit	Emails, cloud docs, API calls	Encryption in transit, network security
Offline Data	Stored locally or in backups	Local files, database, backup tapes	Encryption at rest, access control, physical security
Sensitive Data	Any location, requires protection	PII, financial info, classified info	Access control, encryption, auditing, classification