Currently, IT checklists are security theater. Reducing liability vs improving security.
How many orgs are transitioning to zero knowledge networks, encrypting all data at rest?
How many orgs are transitioning to zero knowledge networks, encrypting all data at rest?
That’s a common checklist item. Implementing it is of course more work than just checking the box, but ensuring it’s actually done means it’s added to a lot of different checklists.
Never store PII as cleartext, akin to proper password storage.
Translucent Databases https://www.amazon.com/gp/product/1441421343
Encrypting databases, file systems, and backups remain necessary, but insufficient.