TLS certificates:
TLS (Transport Layer Security) is the standard protocol for encrypting data in transit over networks. Certificates authenticate the server and establish a secure, encrypted channel.
HTTPS:
HTTPS is HTTP over TLS/SSL. It ensures that data sent between clients (like web browsers) and the cloud server is encrypted and protected from eavesdropping or tampering.

Using cloud-based repositories can violate data sovereignty requirements if the cloud provider stores or processes data in jurisdictions outside the country or region required by applicable regulations. This may place the data under foreign legal authority, creating compliance issues.
Multiregion redundancy for backups replicates data across multiple geographic locations. If those backup locations are in different countries or regions than permitted by regulatory or contractual requirements, the organization may violate laws governing where data must remain stored or processed.

Classification assigns labels to files based on their sensitivity, value, and regulatory requirements, guiding how the data should be handled and protected.

Virtualization reduces a company's hardware attack surface by consolidating multiple physical systems into virtual machines (VMs) running on fewer physical servers. This minimizes the number of physical devices that need to be secured and maintained, reducing potential entry points for attackers.

Passive reconnaissance focuses on gathering information through publicly available sources and OSINT methods without intrusive testing or payload injection. This approach is used to learn about the target while minimizing direct interaction and detection risk.