A department has a business requirement that all their backups are encrypted to prevent data...

According to IBM’s documentation12, client-side encryption is a method of encrypting data before it is sent to the server for backup or archive operations. Client-side encryption uses a password that is entered by the user to generate an encryption key. The password needs to be confirmed when encrypting the file for backup, and also needs to be entered when performing restores of encrypted files12.

Client-side encryption satisfies all the requirements of encrypting data during transmission and storage, because:

It prevents data from being read during transmission, because the data is encrypted before it leaves the client system3.

It prevents data from being read once written in the storage pool, because the data remains encrypted on the server and can only be decrypted with the password that is known by the user3.