Re: A "default stance" question for my esteemed Educause colleagues....

[Joel Garmon <jsg () PITT EDU>]

Our goal is to encrypt all laptops and desktops for faculty and staff.  However, we are currently focusing on the 
departments that have contact with PII.  We are using Bitlocker and FileVault.  To monitor and track which devices are 
encrypted and that an encrypted device is still encrypted, we are investigating MBAM and JAMF.

Like most universities, we have some distributed IT and some departments are already using MBAM and JAMF.  Our goal is 
to attempt to standardize on products and methods.  Even if we don't standardize, we are going to receive reports and 
monitor the departments for compliance that do maintain PII and are not maintained by central IT.  

Joel Garmon
Chief Information Security Officer
Computing Services and Systems Development (CSSD)
University of Pittsburgh