Data at Rest
Data at rest refers to information that is not being actively processed or transmitted and that is stored on a persistent storage medium.
3 slides · 1 min read · Domain 2
The protection of stored data is often a key requirement to maintain a company's sensitive information.
Databases, backup information, off-site storage, password files, and many other types of sensitive information need to be protected from disclosure or undetected alteration. Use of cryptographic algorithms that limit access to the data to those that hold the proper encryption (and decryption) keys is a simple way to generate protection. Some modern cryptographic tools also permit the condensing, or compressing, of messages, saving both transmission and storage space, making them efficient. Selecting cryptographic methods supported by the hardware will further accelerate processing.
Risks
The risks associated with data at rest
is that malicious users could try to gain unauthorized physical or logical access to a device, transfer information from the device to an attacker's system, and perform other actions that jeopardize the confidentiality of the information on a device.
Recommendations
To protect data at rest, removable media and mobile devices must be encrypted when used to store valuable data. Mobile devices include laptops, tablets, wearable tech, and smartphones. Access and redundancy controls also need to be applied.