Key management is the very most important part of encryption, says Pravin Kothari, CEO of CipherCloud. Never store the keys on the same server as the database that’s been encrypted using them. Database encryption deployments suffer from insecure key management due to scalability issues when dealing with native encryption on numerous databases and across multiple platforms. If the keys are misplaced or destroyed by a disaster, the data is as good as gone, says Thales e-Security’s Richard Moulds.”]

