Educause Security Discussion mailing list archives

Re: U-wide Full-Disk Encryption Costs


From: David Grisham <Dgrisham () SALUD UNM EDU>
Date: Thu, 18 Sep 2014 10:51:36 -0600

We are using McAfee AutoBoot for our workstations and are currently
pushing to the enterprise. Laptops are using McAfee Preboot full disk
encryption. 
Since we own the suite of McAfee products, the prices were not
prohibitive given the fines and costs of breach reporting when
workstations walk away. 
Thanks and Cheers.-grish

"Garmon, Joel" <garmonjs () WFU EDU> 9/18/2014 7:50 AM >>>
We have the university and also an academic medical center and
hospital
chain.  We had used an encryption product (not named) for laptops
which
costs $60 per license.  It worked great but the cost was prohibitive as
we
moved to also encrypt all PCs.

We have moved to Microsoft Bitlocker with the MBAM console. We have
been
using it for about 6 months and it is working great.  No issues.  And
it is
part of our enterprise licensing agreement.

We have kept our other licensed product for some non-windows devices.



Thank you,

Joel Garmon
Director Information Security
Wake Forest University
336-758-2972

On Thu, Sep 18, 2014 at 9:18 AM, Carr, Michael G
<michael.carr () uky edu>
wrote:

 Does anyone who has implemented/offered a full-disk encryption
safeguard
for the entire institution (or, perhaps, just for laptops & other
such
mobile storage devices) have any ballpark cost figures they are
willing to
share?



·         Per license or site-wide licensing direct costs?

·         Add’l FTE or add’l indirect labor costs?

·         Training materials?

·         Other?



Thanks,



Mike





*Michael G. Carr*, JD, CISSP, CIPP

*Chief Information Security Officer*

*& Sr. Mgr, Enterprise Architecture*

UK Analytics & Technologies (UKAT)

The University of Kentucky

122 James F. Hardymon Bldg

Lexington  KY  40506-0495

Desk: (859) 218-0306

Mobile: (513) 295-3067

Michael.Carr () UKy edu 



*Security/Privacy Tip:  * Always follow state records retention laws
but
never keep data longer than you need to.



 [image: Description: protect dont collect]







Current thread: