This white paper investigates the measures needed to secure confidential data stored across many data repositories, both on-premises and in the Data Cloud. It gives a high-level overview of the encryption techniques available to protect such data and shows why encryption, though necessary, is not sufficient to ensure confidentiality of sensitive information. Finally, we introduce the measures that must be taken to implement a Zero Trust environment for data, and show how, in conjunction with encryption, these measures help to achieve the goal of defense in depth.