Overview
Encryption at rest ensures that if a physical disk or server is stolen, the data on it cannot be read without the encryption key.
Implementation
Commonly handled by the operating system or the storage hardware itself (e.g., BitLocker, FileVault).