It consists of the protection of data at rest by encrypting the data.
Security control to protect data at rest to mitigate risks in case of theft or loss.