Protect · Foundational tier · Network Security

PR-11Data in transit is encrypted

Services use TLS 1.2 or later with strong ciphers, internally and on the internet edge.

Status

Evidence indicates

All 1 item support it and are fresh.

Exposure

High

1 evidence items from 1 sources

CCSA · Protect

Below Foundational

Not blocking this domain's next tier.

Evidence chain

Every item is read-only, dated, hashed and re-runnable. This is what an examiner can test.

ev-pr11-1

No weak TLS or ciphers on 214 internet-facing assets

Tenable Vulnerability Management · telemetry · collected 9 h ago (Oct 15, 2026 · 06:01 UTC) · limit 30 days

Supports

Query: GET /workbenches/assets?plugin_family=SSL%20and%20TLS&tag.exposure=internet
Identity: api keys svc-assurance (read-only)
Collector: tenable-collector 2.2.0
Window: 720 h
Records: 214
SHA-256: 969e9a11e30a00d33ad675a289043d848abc59940a03ca92888b326995c95e10