Re: Laptop encryption

[Harold Winshel <winshel () CAMDEN RUTGERS EDU>]

I work for a decentralized academic unit but we've been looking at a
number of enryption utilities the past year.  Some we've been using
on a light scale - other's we're still evaluating.

I'd put them into two classes - full disk and file / folder.

I'd also categorize them in another way: free, inexpensive (under $60
/ license) or expensive (above $60 / license).  Of course, with
volume purchases there can be big discounts available.

One program that we liked a lot was a free program called
Truecrypt.  Besides being free, it is pretty easy to use and can be
used on different media (hard drives, CD's, etc.).  It's not full
disk, which can be a concern but, for a quick way of encrypting
something, it works.

We've looked at some higher end products - both file / folder and
full disk, and are leaning toward the full disk.  I'd be glad to give
you more details if you're interested because we've spent a lot of
time doing research on different products.

Harold


At 04:53 PM 10/4/2007, Dennis Tracz wrote:
> Hello all,
> I am new to this list so please forgive me if this topic has already
> been covered.
> I am interested in knowing, what is the common practice for Laptop
> encryption, specifically:
> 1.  What is your current practice:
>    a.  Do you use encryption on laptops (for laptops you administer)
>    b.  Do you encrypt the entire hard drive or selected folders
> i.e.( My Documents)
>    c.  Do you use a commercial product or EFS
>    e.  If encryption is used is it automatically configured (for
> laptops you administer) or do users have a choice
>
> 2.  What is your desired practice if you do not use encryption on laptops
> a.  Is this something you are wanting, attempting or not wishing to do?
> b.  Would you encrypt the entire hard drive or selected folders
> i.e.( My Documents)
> c.  Would you use a commercial product or EFS?
> d.  Would you automatically encrypt (for laptops you administer) or
> would you let your users have a choice?
>
> Any insight is greatly appreciated.  Thanks in advance
>
> --
> Dennis N. Tracz CISSP-ISSMP, CISM
> Information Security Officer
> University of Calgary
> (403) 220-4010

Harold Winshel
Computing and Instructional Technologies
Faculty of Arts & Sciences
Rutgers University, Camden Campus
311 N. 5th Street, Room B10 Armitage Hall
Camden NJ 08102
(856) 225-6669 (O)