The encryption fallacy

When encryption at rest won’t come to the rescue.

Teri Radichel
Cloud Security
Published in
15 min readAug 9, 2019

--

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️ Check out my series on Automating Cybersecurity Metrics. The Code.

🔒 Related Stories: Cybersecurity for Executives | Encryption

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

In my prior posts on Cybersecurity for Executives, I explained how to protect data by blocking access from the Internet, on your internal network, via authentication and authorization strategies like segregation of duties and MFA. The chances are that at some point, you still may experience unwanted data exposure by someone who did it inadvertently or maliciously. Here is where encryption may or may not help you.

Click here to purchase a copy of the full ebook or paperback on Amazon: Cybersecurity for Executives in the Age of Cloud

Encryption is a mechanism for turning sensitive data into something unreadable and unusable. Even if someone can see or access the data, it will be of no use to that person. They can’t read it or know what it says. The phrase encryption at rest refers to encrypting data before…

--

--

Teri Radichel
Cloud Security

CEO 2nd Sight Lab | Penetration Testing & Assessments | AWS Hero | Masters of Infosec & Software Engineering | GSE 240 etc | IANS | SANS Difference Makers Award