Encrypted Communication with External Data Sources

Security Requirement

Network communication with external data sources MUST be encrypted. This applies to all connections, not just those carrying sensitive data.

Rationale

Encrypted communication is required for:

1. Confidentiality: Prevent interception of data in transit
2. Integrity: Prevent tampering with data in transit
3. Compliance: Required by widespread security standards and zero trust architectures
4. Zero trust: In a zero trust model, no network path is considered trustworthy, so all communication must be encrypted regardless of whether it is "internal" or "external"

Encryption Requirements