Data Observability
PRACTICE
DATA ENGINEERING
Systematic monitoring of enterprise data pipelines to ensure freshness, volume consistency, schema stability, and distribution health.
PRACTICE
CYBERSECURITY
Encryption at Rest
The protection of stored data by transforming it into ciphertext that requires authorised cryptographic keys to read.
BUSINESS RELEVANCE
At-rest encryption reduces exposure if storage media, backups, snapshots, or accounts are compromised and supports many contractual and regulatory requirements.
IMPLEMENTATION EXAMPLE
A platform encrypts database volumes and backups with managed keys, restricts key use to service identities, logs decryption operations, and tests recovery procedures.
LIMITATIONS
Encryption at rest does not protect data while an authorised application is processing it. Compromised identities or applications may access plaintext, and poorly managed keys can defeat the control or make data unrecoverable.
TECHNICAL EXPLANATION
It applies to disks, databases, object storage, backups, devices, and archives. Controls may operate at hardware, volume, file, database, or application level. Effective protection depends on key generation, separation, storage, rotation, access control, backup, and recovery.
Secondary Topics
Data Engineering
Sources
NIST SP 800-111 — Storage Encryption — https://doi.org/10.6028/NIST.SP.800-111; NIST CSF 2.0 — https://www.nist.gov/cyberframework
Related terms
Extract, Load, Transform (ELT)
PRACTICE
DATA ENGINEERING
A modern data engineering paradigm loading raw information directly into a target warehouse prior to model transformations.
Paid Social
PRACTICE
PERFORMANCE ADVERTISING
Sponsored advertising campaigns published across social media networks targeting granular user demographics and interests.
Cross-Device Tracking
PRACTICE
PERFORMANCE ADVERTISING
Technology matching user identity and session interactions across smartphones, tablets, and desktop computers for unified analytics.
System Integration
PRACTICE
SYSTEMS ARCHITECTURE
The technical discipline of linking disparate enterprise software, databases, and APIs into a coherent operating ecosystem.