Protects the integrity and confidentiality of data while it’s being transmitted across or between networks. It includes firewalls, encryption, intrusion detection systems, and more. Ensures that data, both in transit and at rest, is protected from unauthorized access or corruption. This includes implementing strong access controls and encryption techniques.

Focuses on keeping software and applications free from threats, vulnerabilities, and exploits. This can involve patching vulnerabilities, conducting security code reviews, and ensuring secure development practices.