A company is using a legacy FTP server to transfer financial data to a third party. The legacy system does not support SFTP, so a compensating control is needed to protect the sensitive, financial data in transit. Which of the following would be the most appropriate for the company to use?

A tether connection refers to sharing a mobile device's internet connection with another device. This method does not inherently provide encryption or secure data transfer, making it unsuitable as a compensating control for sensitive financial data. Tethering primarily focuses on connectivity rather than securing data in transit.

Patch installation involves updating software to fix vulnerabilities and improve security. While this is crucial for overall system security, it does not directly protect data in transit. Since the legacy FTP server does not support SFTP, simply patching the system will not address the immediate need for secure transmission of sensitive information.

Full disk encryption secures data stored on a device by encrypting the entire disk. However, this does not protect data while it is being transmitted over a network. Therefore, while it is an essential security measure for data at rest, it fails to address the needs of protecting data in transit, which is the primary concern in this scenario.