 Once this is done the different data is separated and placed in different modules.When assuming that each module has total control over the sensitive information it contains, it is possible to specify when and how should leave the module.An example is a cryptographic module that can prevent keys from ever leaving the module unencrypted.