Encrypt File System

Any system should have controls in place to encrypt data at rest (in storage) or in transit (over a network).

There are many different forms of controls for how this all can work based on the Operating System and use cases of the applications.

Windows

For Windows bitlocker is the default encryption system which encrypts a hard-disk or drive which cannot be accessed under credentials have been provided via a username/password, private key, or certificate.