CISSP: Certified Information Systems Security Professional

Full-disk encryption protects data at rest only while the disk remains encrypted and its key is unavailable. After user authentication unlocks the device, the data is accessible in plaintext to the authenticated operating environment, so compromise at that point can expose data at rest. NIST describes full-disk encryption as a data-at-rest protection mechanism.