Deciphering options for laptop encryption

05.12.2005

One of the concerns was what to do when employees leave the company or when a laptop has to be reviewed as part of an investigation or other legal/HR matter. Pointsec (as well as the other products mentioned) offers a key-escrow functionality that includes the concept of a "god key" that enables the laptop to be decrypted by a trusted authority. In our company, that trusted authority will most likely be me.

The next step in the project is to start a proof of concept to allow the team to become comfortable with the technology and to give us the opportunity to test the software against our extremely dynamic environment.

Unlike in financial services, health care and some other regulated industry, our users have all sorts of what I like to call funky applications installed on their laptops. For example, some engineers and developers have various debugging tools and employ multiboot environments, all of which will have to be tested at length. In addition, we are a global company, so we have to ensure that the product can be used on laptops with language packs or an operating system in another language.

But I'm fairly confident that we will have a successful deployment and will soon be providing this disk encryption software to address the current and future needs of the company.

What do you think?