If you can't answer that question off the top of your head, check out a great post on encryption strategy by Cynthia Luu over on Securityintelligence. There's really no excuse not to encrypt your data. Failure to do so almost always raises the potential negative impact of a breach beyond an acceptable level of risk. There's a lot going on behind the scenes when successfully managing encrypted data, though. A good strategy spans several organizational documents: an Encryption Policy, Procedure and Standard and possibly a separate Key Management Procedure. As we all know though, encryption is more than just documented processes. It starts with selection of the right solution for your data and network and, of course, you have to identify a Key Master. If you have questions, or need help developing your encryption strategy, call us.