Encryption at rest. So, if a hard disk (including a turned-off laptop) is stolen, mishandled, or not destroyed properly. Someone physically attacking a running

Encryption at rest. So, if a hard disk (including a turned-off laptop) is stolen, mishandled, or not destroyed properly. Someone physically attacking a running computer is a different, and much harder, threat model. This is why companies employing fde will also require laptops to be shutdown before being moved.