An organization is implementing encryption for data at rest to reduce the risk associated with unauthorized access. Which of the following MUST be considered to...