28Nis
Which kind of data breaches or risk can happen if there is no virtual/physical disk encryption
There is an Azure-based internal database server and is not public-facing. There is another front-end application. A specific user group can connect with a VPN. There is no encryption applied at the disk level. So what risk or specific gap can impact the business at a larger level?
What kind and types of risk pertain OR the possibility of a breach in the lack of encryption? Also what kind of controls can be used to prevent this?
