Geoff Worboys wrote:

> ...

You are probably right. As I said, I haven't yet seen the actual
requirements, but what has been reported indicate that they aren't
easily fulfilled. Encrypting the disc or the entire database is
probably not enough. Don't ask me why (yet).
Do the requirements make sense, do they make anything more secure
(than disk encryption)? Probably not. We will just have to comply.
I'll probably be back later, hoping to be more specific.
If it isn't obvious, let me just confess: I have next to no
experience with encryption technology.

--
Aage J.