<<Asset at Risk>> Data (copy)
<<Security Requirement>> Encrypt sensitive data at rest (copy)