Re: Laptop encryption

[Todd Clementz <clementz.7 () OSU EDU>]

I would like to be involved if possible as well.  We are currently implementing PGP and I was curious to know what 
everyone else was working with.

Todd Clementz, MCP
Systems Engineer
Knowlton School of Architecture
The Ohio State Univeristy
clementz.7 () osu edu
614.292.8544


-----Original Message-----
From: Sarah Stevens [mailto:sarah () STEVENS-TECHNOLOGIES COM] 
Sent: Tuesday, October 09, 2007 12:24 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Laptop encryption

Hello,

I wanted to send a quick email to everyone interested in the Laptop Encryption Teleconference to confirm that the 
majority of individuals interested were able to participate at 11:00 am ET on Wednesday, October 10.  I will be sending 
an invitation to the telecon with dial in information to all those whom have expressed interest in the call shortly.

Thanks, and I look forward to the call.

Sarah
--------------------------
Sent from my BlackBerry Wireless Handheld

----- Original Message -----
From: Greg Vickers <g.vickers () QUT EDU AU>
To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
Sent: Mon Oct 08 16:28:03 2007
Subject: Re: [SECURITY] Laptop encryption

Hi Sarah,

Sarah Stevens wrote:
> I will be setting up a conference call for Wednesday at 11:00AM ET.  
> Is that too soon, or can everyone make it at that time?  Let me know 
> what you think, as I can schedule at a later date, if necessary.  Once 
> I receive responses on interest level, I will send out an invite with 
> the dial in number.

Looking at
http://en.wikipedia.org/wiki/List_of_U.S._states_by_time_zone, I assume ET is UTC -5, so that'll be 4AM Thursday 
morning here in Queensland, Australia - will there be a summary of the discussion?

> I am looking forward to this conversation, it will be interesting to 
> share the information obtained.

Me too! :)

> ----------------------------------------------------------------------
> --
> *From:* Sadler, Connie [mailto:Connie_Sadler () BROWN EDU]
> *Sent:* Mon 10/8/2007 6:42 AM
> *To:* SECURITY () LISTSERV EDUCAUSE EDU
> *Subject:* Re: [SECURITY] Laptop encryption
>
> I am interested as well.
>
> Connie J. Sadler, CM, CISSP, CISM, GIAC GSLC IT Security Officer, 
> Brown University Campus Box 1885, Providence, RI 02912 
> Connie_Sadler () Brown edu,  Office: 401-863-7266
>
> -----Original Message-----
> From: Ewing, Ashley [mailto:aewing () UA EDU]
> Sent: Monday, October 08, 2007 9:11 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Laptop encryption
>
> I would like to participate.
>
> J. Ashley Ewing, CISSP, CISA
> Director of Security and Compliance/CISO Office of Information 
> Technology (OIT) The University of Alabama
> A105 Gordon Palmer Hall (Box 870346)
> Tuscaloosa, AL 35487-0346
> Office: 205-348-6524
> Cell:     205-535-0335
>
> -----Original Message-----
> From: Sarah Stevens [mailto:sarah () STEVENS-TECHNOLOGIES COM]
> Sent: Friday, October 05, 2007 7:06 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Laptop encryption
>
> If there is interest, I would be willing to set up the telecon bridge.  
> We have an inside bridge.  No fee for anyone who wants to take part.
>
> Sarah Stevens
> Stevens Technologies
> --------------------------
> Sent from my BlackBerry Wireless Handheld
>
> ----- Original Message -----
> From: Paul Keser <pkeser () STANFORD EDU>
> To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
> Sent: Fri Oct 05 17:00:40 2007
> Subject: Re: [SECURITY] Laptop encryption
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> There seems to be a lot of interest on the list.  Do you guys want to 
> setup a conf call?  I haven't done that before but I can look into it 
> if you are interested.
>
> I am in PST.
>
> - -PaulK
>
> Paul Keser
> Assoc. Information Security Officer
> Stanford University
> 650.724.9051
> GPG Fingerprint:  DBA3 E20F CE91 28AA DA1C  4A77 3BD9 C82D 2699 24FB
>
>
> Harold Winshel wrote:
>  > Dennis,
>  >
>  > Will do.  What days and times are good for you?  What time zone are you?
>  >
>  > Harold
>  >
>  > At 05:33 PM 10/5/2007, you wrote:
>  >> Hi Harold,
>  >>
>  >> I would love to learn more about the research you are & have done. 
> If  >> possible can I give you a call next week?
>  >>
>  >> thanks
>  >>
>  >> Dennis.
>  >>
>  >> Harold Winshel wrote:
>  >>> I work for a decentralized academic unit but we've been looking 
> at a  >>> number of enryption utilities the past year.  Some we've 
> been using  >>> on a light scale - other's we're still evaluating.
>  >>>
>  >>> I'd put them into two classes - full disk and file / folder.
>  >>>
>  >>> I'd also categorize them in another way: free, inexpensive (under 
> $60  >>> / license) or expensive (above $60 / license).  Of course, 
> with  >>> volume purchases there can be big discounts available.
>  >>>
>  >>> One program that we liked a lot was a free program called Truecrypt.
>  >>> Besides being free, it is pretty easy to use and can be used on  
> > > > different media (hard drives, CD's, etc.).  It's not full disk, 
> which  >>> can be a concern but, for a quick way of encrypting 
> something, it works.
>  >>>
>  >>> We've looked at some higher end products - both file / folder and  
> > > > full disk, and are leaning toward the full disk.  I'd be glad to 
> give  >>> you more details if you're interested because we've spent a 
> lot of  >>> time doing research on different products.
>  >>>
>  >>> Harold
>  >>>
>  >>>
>  >>> At 04:53 PM 10/4/2007, Dennis Tracz wrote:
>  >>>> Hello all,
>  >>>> I am new to this list so please forgive me if this topic has 
> already  >>>> been covered.
>  >>>> I am interested in knowing, what is the common practice for 
> Laptop  >>>> encryption, specifically:
>  >>>> 1.  What is your current practice:
>  >>>>    a.  Do you use encryption on laptops (for laptops you administer)
>  >>>>    b.  Do you encrypt the entire hard drive or selected folders
>  >>>> i.e.( My Documents)
>  >>>>    c.  Do you use a commercial product or EFS
>  >>>>    e.  If encryption is used is it automatically configured (for
>  >>>> laptops you administer) or do users have a choice  >>>>  >>>> 2.  
> What is your desired practice if you do not use encryption on  >>>> 
> laptops  >>>> a.  Is this something you are wanting, attempting or not 
> wishing to do?
>  >>>> b.  Would you encrypt the entire hard drive or selected folders  
> > > > > i.e.( My Documents)  >>>> c.  Would you use a commercial product 
> or EFS?
>  >>>> d.  Would you automatically encrypt (for laptops you administer) 
> or  >>>> would you let your users have a choice?
>  >>>>
>  >>>> Any insight is greatly appreciated.  Thanks in advance  >>>>  
> > > > > --  >>>> Dennis N. Tracz CISSP-ISSMP, CISM  >>>> Information 
> Security Officer  >>>> University of Calgary  >>>> (403) 220-4010  
> > > > >  >>>>  >>>  >>> Harold Winshel  >>> Computing and Instructional 
> Technologies  >>> Faculty of Arts & Sciences  >>> Rutgers University, 
> Camden Campus  >>> 311 N. 5th Street, Room B10 Armitage Hall  >>> 
> Camden NJ 08102  >>> (856) 225-6669 (O)  >>  >> --  >> Dennis N. Tracz 
> CISSP-ISSMP, CISM  >> Information Security Officer  >> University of 
> Calgary  >> (403) 220-4010  >>  >>  >>  >  > Harold Winshel  > 
> Computing and Instructional Technologies  > Faculty of Arts & Sciences  
> > Rutgers University, Camden Campus  > 311 N. 5th Street, Room B10 
> Armitage Hall  > Camden NJ 08102  > (856) 225-6669 (O) -----BEGIN PGP 
> SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org 
> <http://enigmail.mozdev.org/>
>
> iD8DBQFHBtAoO9nILSaZJPsRAjMaAJ9jKQ1UvjtcW3UeZwShT3gE7hXDZgCfR8n8
> u1PelSm0uHGZFma0+7MYt14=
> =hBTt
> -----END PGP SIGNATURE-----

--
Greg Vickers
IT Security Engineer & Project Manager
IT Security, Network Services,
Information Technology Services
Queensland University of Technology
L12, 126 Margaret St, Brisbane

Phone: +61 7 3138 9536
Mobile: 0410 434 734
Fax: +61 7 3138 2921
Email: g.vickers () qut edu au
IT Security web site: http://www.its.qut.edu.au/itsecurity/

CRICOS No. 00213J