IT security is, generally, defined as a defensive approach to
protect a company and its assets from unauthorized access by an
intruder. IT security efforts include network security
appliances, HoneyPots, robust authentication, limiting
authorization to least necessary privileges, as well as other
perimeter security defenses. However, these approaches do not
provide definitive protection of the company's most valuable
asset, its data, because a single intrusion could result in
sensitive data being compromised. Additionally, in today's
workplace culture the disgruntled employee may be as much of a
threat as any external threat. Data encryption is a direct
response to internal and external security threats that may also
meet compliance regulations. Encryption provides strong security
for data "at-rest"; in our case, the data stored in the
database, but to be effective should be implemented as a part of
a broader security plan. There are many issues involved with the
implementation of encryption, details that req