Data is at rest when it is not in transit or in use. For example, data in OnBase is at rest when it is in the Disk Groups or database and is not being accessed by any users or processes. Data in both the OnBase database and Disk Groups can be encrypted using Encrypted Alpha Keywords and Encrypted Disk Groups., but encryption is not the only way to help secure at-rest data in OnBase.
At-rest data can often be accessed by users who may have elevated privileges on the network but do not have access to that data in OnBase, such as SAN administrators or DBAs. It is also the most likely data to be stolen by malicious attackers. Encrypting at-rest data can prevent privileged users and attackers from opening and reading documents outside of OnBase.
This section covers the following areas: