This whitepaper discusses the known issues with Microsoft BitLocker that you need to consider before deploying it.
It's hard for one vendor to be everything to everyone. The vendor with the best operating system or most powerful directory service may not be the vendor with the best security options for your business needs. Sure, it's wise to use what you already have at your disposal – i.e. BitLocker with Windows 7 Ultimate and Enterprise. But is putting all of your eggs into one basket and relying on a single vendor the best approach?
Encryption professionals put forward the proposition that destroying or overwriting the encryption key on fully encrypted hard drives is a plausible and real way of sanitizing them. This method is commonly referred to in the industry as “crypto erase”. This whitepaper compares the traditional sanitization methods (overwrite, degauss, and destroy), outlined in National Institute of Standards and Technology (NIST) SP 800‐88, to the crypto erase method.
This paper reviews the steps some organizations are taking to draft, implement, and enforce risk mitigation policies for removable media, and how technologies available today, and appearing on the horizon, are helping.
WinMagic, Inc.1 and Intel have collaborated to deliver an integrated hardware and software solution
that combines encryption with full-system disable to bind data to the system hardware. WinMagic’s
SecureDoc*1 with Intel® Anti-Theft Technology (Intel® AT)2 allows a laptop to intelligently lock itself
down and prevent an OS from booting. The laptop can also lock critical elements of security credentials
stored in hardware.
Best-in-Class companies experienced 6-times fewer data loss or data exposure incidents in the last 12 months as compared to the bottom performers in the study
Best-in-Class companies gained 40% advantage over Laggards in terms of total cost of encryption per endpoint per year
Best-in-Class companies saved an average of $33 per endpoint per year compared to Laggards for deploying and managing endpoint encryption
Sensitive data, from trade secrets to customer data, is more valuable
and hence, more vulnerable than ever. Securing the data stored within
the enterprise can be challenging in dealing with the heterogeneous
nature as to where this information can be stored. In addition, dealing
with the deployment of an enterprise encryption solution in conjunction
with balancing administrator needs and end-user needs can be
complex.
With data breaches widespread, no organisation can afford to be complacent, but most data losses are avoidable. Many of the breaches making headline news are caused by the loss or theft of laptops and other portable devices. To protect themselves from financial and reputational damage, encryption technologies can reduce risks by ensuring the information on such devices is secure when users are on the move. They can also add value by allowing the secure sharing of information among authorised users and by enabling more secure remote working.
This White Paper examines the requirements of the OMB directive for Government organizations, and describes how encryption solutions can address these requirements. It provides some guidelines that organizations should consider when choosing encryption solutions for mobile computers, and any medium used to remove sensitive information from Government premises. [186kb]
To support the broader deployment of encryption for the protection of sensitive data and to deal with the management of encryption keys over their lifecycle, Best-in-Class organizations are beginning to look towards centralized key management and automated key distribution solutions to deliver higher scalability, lower operational costs, reduce risk, establish consistent security policies, and sustain regulatory compliance. [630kb]
The Trusted Computing Group develops open specifications for building
blocks that enable secure computing. Their most significant publication to
date is the Trusted Platform Module (TPM), a specification for an embeddable
microcontroller that provides a number of security services for the benefit of
its host platform. [209kb]
There are many factors driving requirements for data encryption. Compliance with industry and government regulations, concerns over information privacy and identity theft, and the risks of data breaches are most often cited. Business process outsourcing, increased workforce mobility, and new methods of business collaboration are also key drivers. These new trends require that sensitive and proprietary data be distributed further a field. They are forcing organizations to re-examine where their data is stored and how it is protected. [233kb]
As organizations look to better protect information assets and combat data
breaches, they are increasingly turning their attention to removable storage
media – USB drives, CD / DVDs and flash memory cards. With significant
storage capacity and a small form factor, these common devices are
rendering organizations susceptible to ‘data leakage’. [200kb]
‘Data-at-rest’ (‘DAR’) refers to data in computer storage (and excludes data
temporarily residing in computer memory). Examples include data stored on
a computer hard drive, a database on a networked server, and files copied to
a USB drive. Encryption of DAR is the encryption of data while resident on
computer storage media.
Protecting data has become increasingly important for companies, as laws enforcing consumer privacy
have come into effect across the globe. These laws are placing companies accountable for their
customers’ information. Companies need to guard their customers’ personal information to avoid
lawsuits and public embarrassment. [246kb]