What is a Encryption?
Scrambling data so only someone with the key can read it.
Encryption in transit (HTTPS, TLS) protects data while it travels; encryption at rest protects files and backups on a disk. A stolen laptop with disk encryption on is an inconvenience; without it, it is a data breach you must report.
The key is everything. Good systems keep keys away from the data and rotate them.
What to do
- Turn on disk encryption on every laptop (BitLocker, FileVault).
- Keep backups encrypted and the key somewhere other than the backup.
- Ask vendors whether your data is encrypted at rest and who holds the key.