Re: High-Volume Portable/External and Encrypted Drives

[Charlie Prothero <Charlie.Prothero () KEYSTONE EDU>]

Wow, I think I would try and talk them into using a terminal server to eliminate moving the datasets. Seagate's website 
doesn't seem too healthy at the moment, so I can't pull up the details on this product. However, I can't imagine the 
performance being too good on a process that churns though that much data on a portable device. Comparatively, a 
terminal server with 15K RPM drives would be quite nice, assuming the data isn't video...

________________________________
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Connie 
Sadler
Sent: Wednesday, December 09, 2009 1:19 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] High-Volume Portable/External and Encrypted Drives


I have a question for this group - some of our users have a need for secure portable storage in large chunks (a TB?). I 
see these, for example:  http://www.seagate.com/www/en-us/products/external/blackarmor/ Are there others that we can 
offer our users that are portable and still encrypted? Ideally, I'd like to have key escrow as well, but I'm more 
worried right now about our users storing large volumes of user data on external portable drives without our knowledge. 
We're looking at DLP over the long-term, but in the meantime, we need an option for our folks who need to pull 
sensitive data out of our central repositories onto a portable/external drive and still have it encrypted in case of 
loss or theft. There aren't many real needs for this (we like to keep our sensitive data on protected servers!), but 
I'd rather be part of the solution than to have them go around me.
Thanks much...
Connie
[cid:image001.jpg@01CA78DB.E88A2920]<https://intranet.lpch.org/index.html>
Connie J. Sadler
Information Security Officer, CM, CISSP, CISM, GIAC GSLC, CGEIT
Lucile Packard Children's Hospital at Stanford
CSadler () LPCH org
650-736-4372
P Please consider the environment before printing this e-mail