In the payment industry there is the concept of PCI-DSS. It is basically a set of requirements regarding the handling of sensitive data. While a lot of it is ju

In the payment industry there is the concept of PCI-DSS. It is basically a set of requirements regarding the handling of sensitive data. While a lot of it is just common sense some of it should be applied to any sensitive data that you are working with. Encrypted database tables are not that common. More common is encryption of the whole disk or database using Oracle or some other software/hardware. If you are storing full credit card #s it better be encrypted while the data is at rest.