Encryption for data being stored

I made a similar rant on the r/sysadmin page, but wanted to post it here as well in addition to making slight edits to the wording.


I am an IT Auditor and time and time again I see encryption that is implemented for data being stored (we call it at rest, but we mainly mean while the system is up and running) but its at the disk level (so harddrive encyrption) but not within the database so it's not even …

addition auditor call cybersecurity data encryption making page rant rest sysadmin