Strong access controls are required for access to bulk archive data. This may
be achieved by physical or electronic access controls. Encryption of archives
may permit the strong bulk data access control requirements to be reduced to a
more tractable key management task. 8.9.4 Data stored in a live environment (eg
on a database) should be protected by strong access control. Encryption
mechanisms present within the commercial operating system and database
products may offer benefits but should be used only after their value has been
established.