Question

Companies often have the option to leverage cloud storage, which cloud vendors offer to organizations at competitive prices. However, companies can choose between data-at-rest encryption vs. data-in-transit encryption depending on their needs. Discuss whether companies should opt for either or both types of encryption and under what business requirements. Is one better than the other? Provide any real examples where each encryption option is applicable.

Answer 1

Data in transit means data moving actively from one location to another location through internet or private network. It is also known as data in motion. Data protection is much needed if active data transfer is being involved from local storage to cloud computing system.

Data at rest means data not moving actively from one location to another location through internet or private network. It is stored on hard drive, laptop, flash etc.

No matter it is at Rest/Transit, data protection is much important in both the cases. Let us understand the scenarios where this becomes important.

Data in Transit

è When cloud computing is incorporated.

è When a lot of confidential data transfer between multiple systems across the world needed.

è When distributed database system is incorporated.

è For a multinational company accessing the tools/applications through cloud model

è Industries like Banking, healthcare where movement of data necessary

Data at Rest

è Small organizations which have less/no branches

è Not suitable for cloud model

è Ability to store the data within the system. (System requirements suffice)

Based on these scenarios, we can decide when to choose Data in Transit and Data at Rest. The companies should opt for both the type of encryption in order to protect data at user’s device as well as cloud devices.