Database Encryption

Details and scope

Design and validate encryption and key handling for selected databases. Encryption coverage map, key ownership and rotation plan, pilot configuration and recovery checks. Pilot data can be read by authorised roles and restored using the documented key process. The stated scope is agreed before work starts; additional work is quoted separately.

Specifications

• Up to 3 database instances on 1 engine family; 1 key-management platform; 1 non-production pilot
• 72 specialist-hours including preparation, delivery, checks and handover
• Encryption coverage map, key ownership and rotation plan, pilot configuration and recovery checks
• Acceptance: Pilot data can be read by authorised roles and restored using the documented key process
• Excludes: Database licences, hardware security modules, production-wide migration and certification