Educause Security Discussion mailing list archives

Re: Encrypting Computers and Portable Media


From: Joel Rosenblatt <joel () COLUMBIA EDU>
Date: Mon, 3 Oct 2011 13:43:33 -0400

Hi,

We have deployed GuardianEdge (now called Symantec Endpoint Encryption) on our laptops and desktops that handle sensitive information - it works on windows and Macs and we include the external media encryption component.

We chose this product because of the very flexible password recovery options and we acquired it before they were bought 
by Symantec.

My biggest recommendation is that you develop a very robust desktop/mobile backup solution before you even think about encryption. Our biggest challenge is hard drives developing problems and then having to decrypt the drive to get back the "last bit of data", or worse, all of the data because the person did not bother with the backups.

Good luck!

Joel

--On Monday, October 03, 2011 5:06 PM +0000 "Self, Dennis" <dlself () SAMFORD EDU> wrote:

Colleagues,
Samford University is looking at encryption solutions for personal computers and portable memory devices (memory 
sticks, CD/DVD, etc.)  As a long-term
solution for computers, we are considering buying encrypting hard drives on new machines.  We lease computers, so 
should be able to see the computers all
protected after 3-4 years. For shorter term and portable media we are looking to find the best software solution(s) we 
can find, for Windows and OS X, and
for portable media.  We are looking at Truecrypt as an alternative.  Would you tell me the top three vendors you would 
recommend, and offer any opinion you
would like to,please? Kind regards,
Dennis Self
Director, IT Security & Compliance
Technology Services
Samford University
(205) 726-2692



Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel
Public PGP key
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x90BD740BCC7326C3


Current thread: