Security controls that protect sensitive data during active processing, not only at rest or in transit.