should use well-vetted encryption algorithms.
Using threat modeling or other techniques, assume that the data can be compromised
through a separate vulnerability or weakness, and determine where encryption will be
most effective. Ensure that data that should be private is not being inadvertently exposed