SAP database disks contain regulated information. Which approach best addresses encryption requirements?

1. Select supported at-rest encryption and key-management controls that satisfy the compliance design
2. Rely only on network segmentation
3. Store encryption keys in a public template
4. Assume encrypted disks make database access authorization unnecessary