Many encryption solutions fill a tick box but do not meet the intent of the requirement. This session will look at the practical challenges of architecting an encryption service in hybrid cloud to protect highly sensitive business data from even privileged administrators. It will consider the design decisions, constraints, and risks of implementing effective encryption and key management.