A project team is migrating a customer records system to a new cloud platform. During a security review, the compliance officer notes that customer data is properly encrypted while stored in the database, but data flowing between the web application and the database server travels unprotected across the network. Which control must the project team implement to address this specific gap?