While encryption provides strong protection, there are residual risks to consider. For example, an encrypted device that is left unattended while a user is logged in can be accessed by an attacker. It is important to address these risks through employee awareness training and implementation of appropriate security measures.