I have a big giant database that is basically human resources related. As such, it contains all the PII in the world (SSN, medical related stuff, bank payment info, etc).
If you do not request PII access permissions on the database, PII fields return NULL. If you do receive PII access, everything is displayed in plain text.
As a user and not a database admin, how do I guarantee that the PII itself is secured at rest? I presume that when I log in with my PII viewing privileges, some transformation is done on the underlying data to make it human readable. How do I make sure that when its physically sitting on disk its NOT human readable?
Oracle has this description here and an example of using a java class to decrypt PII but it is murky about providing me a way to verify that decryption of the underlying values is happening under the hood before I see plaintext.