Re: Laptop encryption

[Bob Ono <raono () UCDAVIS EDU>]

Dennis,
The University of California has system-wide licenses for encryption
solutions from Pointsec (whole-disk) and Credant Technologies
(file/directory).  UC Davis campus provides campus units with Pointsec
software for mobile devices. That said, campus units are encouraged to
remove restricted data from mobile devices wherever possible and, where
such removal is not possible, the use whole-disk encryption is required
by policy (see http://manuals.ucdavis.edu/PPM/310/310-75.htm).

Bob

Robert A. Ono
IT Security Coordinator
Office of the Vice Provost
Information and Educational Technology
530-754-6484

  

-----Original Message-----
From: Dennis Tracz [mailto:dntracz () UCALGARY CA] 
Sent: Thursday, October 04, 2007 1:53 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Laptop encryption

Hello all,
 
I am new to this list so please forgive me if this topic has already
been covered.
I am interested in knowing, what is the common practice for Laptop
encryption, specifically:
 
1.  What is your current practice:
    a.  Do you use encryption on laptops (for laptops you administer)
    b.  Do you encrypt the entire hard drive or selected folders i.e.(
My Documents)
    c.  Do you use a commercial product or EFS
    e.  If encryption is used is it automatically configured (for
laptops you administer) or do users have a choice
   
2.  What is your desired practice if you do not use encryption on
laptops
 
a.  Is this something you are wanting, attempting or not wishing to do?
b.  Would you encrypt the entire hard drive or selected folders i.e.( My
Documents)
c.  Would you use a commercial product or EFS?
d.  Would you automatically encrypt (for laptops you administer) or
would you let your users have a choice?

Any insight is greatly appreciated.  Thanks in advance

--
Dennis N. Tracz CISSP-ISSMP, CISM
Information Security Officer
University of Calgary
(403) 220-4010