Timothy Foley and Gale Fritsche of Lehigh University talk about how their university embarked on the development of policies and procedures designed to increase end-user awareness of the importance of data encryption.
Podcast (released on 2007/03/24): http://connect.educause.edu/blog/carie417/educause2006_podcast_encrypt_your_files/21033?time=1174868327 PowerPoint Presentation: http://www.educause.edu/LibraryDetailPage/666?ID=EDU06188 Meeting Notes: Evaluated PGP Desktop, Pointsec, DriveCrypt, SafeGuard. All of these are mentioned in the Gartner's Leader Quadrant. Benchmarked CPU, Memory,Disk hit. They measured up to 70% hit on disk's performance. Not too much impact on CPU or memory. They also evaluated virtual drive encryption. Inherent problems with EFS e.g. the keys are stored in the User's profiles. TrueCrypt is an OpenSource. Linux and Windows versions available. MacOS X to be supported soon. It is the best deal (free) DriveCrypt. CyberAngel. University friendly as they have kick-back program. $60/year subscription. User Awareness: Encryption web page to inform the users. Seminar series titled "Stay out of the news" cover user awareness and user training. Have liaison in all dept. Work closely with liaisons. Final Recommendation: Full disk encryption for PCs. The only way to capture everything is to use Full Disk Encryption. Password protecting Palms and Pocket PCs sufficient as hard reboot wipes the data from these devices anyways. Use MS Backup for backing up EFS data, as that is the only solution that keeps the EFS data encrypted on the back device. Encrypted tape backup are much more secure. Pointsec offers solution for encrypting SD cards. _______________________________________________ FDE mailing list [email protected] http://www.xml-dev.com/mailman/listinfo/fde
