What is Encryption?
Encryption is the mathematical process of scrambling data so that only someone with the correct key can read it - required at rest (stored data) and in transit (data moving across networks) by HIPAA, FTC Safeguards, PCI DSS, and most security reviewers.
Two contexts: encryption-at-rest protects stored data (full-disk encryption on laptops via BitLocker / FileVault, encrypted databases, encrypted backups); encryption-in-transit protects data moving over networks (HTTPS / TLS for web traffic, SMTP TLS for email, encrypted VPN tunnels for remote access).
Modern operating systems make at-rest encryption easy - BitLocker is built into Windows 10/11 Pro, FileVault into macOS, and LUKS into Linux. Enabling and verifying it across the fleet is the operational work.
Email-in-transit (SMTP TLS) is opportunistic - it works only when both sender and receiver support it. For sensitive content, use a secure-message platform or PGP/S/MIME.
Why it matters for Florida small business
Lost laptops and unencrypted backups are the #1 cause of HIPAA breach notifications by volume in Florida. BitLocker reduces a $50k breach to a non-event.
What to do
Verify BitLocker / FileVault is enforced on every device via MDM. Verify backup destinations encrypt at rest. Verify your email server enforces TLS for outbound delivery.