Educause Security Discussion mailing list archives

Re: Laptop encryption


From: Alex Everett <alex.everett () UNC EDU>
Date: Tue, 9 Oct 2007 09:49:16 -0400

I would also like to participate.

Alex Everett, CISSP
ITS Security Engineer
University of North Carolina

-----Original Message-----
From: Anthony Maszeroski [mailto:maszeroskia3 () SCRANTON EDU]
Sent: Tuesday, October 09, 2007 9:28 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Laptop encryption

Count me in too if it's not too late.

Sarah Stevens wrote:
Hello,

I wanted to send a quick email to everyone interested in the Laptop
Encryption Teleconference to confirm that the majority of individuals
interested were able to participate at 11:00 am ET on Wednesday, October 10.
I will be sending an invitation to the telecon with dial in information to
all those whom have expressed interest in the call shortly.

Thanks, and I look forward to the call.

Sarah
--------------------------
Sent from my BlackBerry Wireless Handheld

----- Original Message -----
From: Greg Vickers <g.vickers () QUT EDU AU>
To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
Sent: Mon Oct 08 16:28:03 2007
Subject: Re: [SECURITY] Laptop encryption

Hi Sarah,

Sarah Stevens wrote:
I will be setting up a conference call for Wednesday at 11:00AM ET.
Is that too soon, or can everyone make it at that time?  Let me know
what you think, as I can schedule at a later date, if necessary.
Once I receive responses on interest level, I will send out an invite
with the dial in number.

Looking at
http://en.wikipedia.org/wiki/List_of_U.S._states_by_time_zone, I
assume ET is UTC -5, so that'll be 4AM Thursday morning here in
Queensland, Australia - will there be a summary of the discussion?

I am looking forward to this conversation, it will be interesting to
share the information obtained.

Me too! :)

---------------------------------------------------------------------
---
*From:* Sadler, Connie [mailto:Connie_Sadler () BROWN EDU]
*Sent:* Mon 10/8/2007 6:42 AM
*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* Re: [SECURITY] Laptop encryption

I am interested as well.

Connie J. Sadler, CM, CISSP, CISM, GIAC GSLC IT Security Officer,
Brown University Campus Box 1885, Providence, RI 02912
Connie_Sadler () Brown edu,  Office: 401-863-7266

-----Original Message-----
From: Ewing, Ashley [mailto:aewing () UA EDU]
Sent: Monday, October 08, 2007 9:11 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Laptop encryption

I would like to participate.

J. Ashley Ewing, CISSP, CISA
Director of Security and Compliance/CISO Office of Information
Technology (OIT) The University of Alabama
A105 Gordon Palmer Hall (Box 870346)
Tuscaloosa, AL 35487-0346
Office: 205-348-6524
Cell:     205-535-0335

-----Original Message-----
From: Sarah Stevens [mailto:sarah () STEVENS-TECHNOLOGIES COM]
Sent: Friday, October 05, 2007 7:06 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Laptop encryption

If there is interest, I would be willing to set up the telecon bridge.
We have an inside bridge.  No fee for anyone who wants to take part.

Sarah Stevens
Stevens Technologies
--------------------------
Sent from my BlackBerry Wireless Handheld

----- Original Message -----
From: Paul Keser <pkeser () STANFORD EDU>
To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
Sent: Fri Oct 05 17:00:40 2007
Subject: Re: [SECURITY] Laptop encryption

There seems to be a lot of interest on the list.  Do you guys want to
setup a conf call?  I haven't done that before but I can look into it
if you are interested.

I am in PST.

-PaulK

Paul Keser
Assoc. Information Security Officer
Stanford University
650.724.9051
GPG Fingerprint:  DBA3 E20F CE91 28AA DA1C  4A77 3BD9 C82D 2699 24FB


Harold Winshel wrote:
 > Dennis,

 > Will do.  What days and times are good for you?  What time zone are
you?

 > Harold

 > At 05:33 PM 10/5/2007, you wrote:
 >> Hi Harold,
 >>
 >> I would love to learn more about the research you are & have done.
If  >> possible can I give you a call next week?
 >>
 >> thanks
 >>
 >> Dennis.
 >>
 >> Harold Winshel wrote:
 >>> I work for a decentralized academic unit but we've been looking
at a  >>> number of enryption utilities the past year.  Some we've
been using  >>> on a light scale - other's we're still evaluating.
 >>>
 >>> I'd put them into two classes - full disk and file / folder.
 >>>
 >>> I'd also categorize them in another way: free, inexpensive (under
$60  >>> / license) or expensive (above $60 / license).  Of course,
with  >>> volume purchases there can be big discounts available.
 >>>
 >>> One program that we liked a lot was a free program called Truecrypt.
 >>> Besides being free, it is pretty easy to use and can be used on
different media (hard drives, CD's, etc.).  It's not full disk,
which  >>> can be a concern but, for a quick way of encrypting
something, it works.
 >>>
 >>> We've looked at some higher end products - both file / folder and
full disk, and are leaning toward the full disk.  I'd be glad to
give  >>> you more details if you're interested because we've spent a
lot of  >>> time doing research on different products.
 >>>
 >>> Harold
 >>>
 >>>
 >>> At 04:53 PM 10/4/2007, Dennis Tracz wrote:
 >>>> Hello all,
 >>>> I am new to this list so please forgive me if this topic has
already  >>>> been covered.
 >>>> I am interested in knowing, what is the common practice for
Laptop  >>>> encryption, specifically:
 >>>> 1.  What is your current practice:
 >>>>    a.  Do you use encryption on laptops (for laptops you administer)
 >>>>    b.  Do you encrypt the entire hard drive or selected folders
 >>>> i.e.( My Documents)
 >>>>    c.  Do you use a commercial product or EFS
 >>>>    e.  If encryption is used is it automatically configured (for
 >>>> laptops you administer) or do users have a choice  >>>>  >>>> 2.
What is your desired practice if you do not use encryption on  >>>>
laptops  >>>> a.  Is this something you are wanting, attempting or not
wishing to do?
 >>>> b.  Would you encrypt the entire hard drive or selected folders
i.e.( My Documents)  >>>> c.  Would you use a commercial product
or EFS?
 >>>> d.  Would you automatically encrypt (for laptops you administer)
or  >>>> would you let your users have a choice?
 >>>>
 >>>> Any insight is greatly appreciated.  Thanks in advance  >>>>
--  >>>> Dennis N. Tracz CISSP-ISSMP, CISM  >>>> Information
Security Officer  >>>> University of Calgary  >>>> (403) 220-4010
 >>>>  >>>  >>> Harold Winshel  >>> Computing and Instructional
Technologies  >>> Faculty of Arts & Sciences  >>> Rutgers University,
Camden Campus  >>> 311 N. 5th Street, Room B10 Armitage Hall  >>>
Camden NJ 08102  >>> (856) 225-6669 (O)  >>  >> --  >> Dennis N. Tracz
CISSP-ISSMP, CISM  >> Information Security Officer  >> University of
Calgary  >> (403) 220-4010  >>  >>  >>

 > Harold Winshel
 > Computing and Instructional Technologies  > Faculty of Arts &
Sciences  > Rutgers University, Camden Campus  > 311 N. 5th Street,
Room B10 Armitage Hall  > Camden NJ 08102  > (856) 225-6669 (O)


--
- Anthony Maszeroski
-----------------------------------
Information Security Manager
The University of Scranton
email : maszeroskia3 () scranton edu
phone : 570-941-4226
-----------------------------------

Attachment: smime.p7s
Description:


Current thread: