Full-Disk Encryption Suites

Posted by Tom Wabiszczewicz on November 3, 2006

Tags: PGP Whole Disk Encryption,  SafeBoot Device Encryption,  SafeNet ProtectDrive 7.2,  Tom Wabiszczewicz,  data loss,  encryption software,  full-disk encryption,  laptops,  mobile devices,  mobile security,  notebooks,  security software,  security strategy,  Data Protection,  Data Security,  Encryption,  Security and Privacy

Channel: Data Protection

Corporate america, universities and government entities alike are under the gun to stop data leakage from mobile devices gone astray. We decided to sight in on the best way to keep data safe if hardware falls into the wrong hands--full-disk encryption.

Implementing a full-disk encryption suite across the enterprise isn't easy. Nor is it inexpensive: The least costly product we tested runs close to $70 per device even at 1,000 seats. So yes, cost and complexity are significant, but so is the threat: In the 2006 CSI/FBI survey, laptop/mobile hardware theft was second only to viruses as the most prevalent type of attack detected in the past 12 months, cited by nearly half of respondents. Losses per respondent increased from $19,562 in 2005 to $30,057 in 2006. Constant media scrutiny of laptop thefts means money spent on encryption could pay off in good PR.

Impact Assessment Click to enlarge in another window

And enterprises may soon see some downward price pressure as Microsoft makes a play for this market. We found its BitLocker full-disk encryption utility, which will ship in the Enterprise and Ultimate versions of Vista, reasonably easy to use (see page 58). It's not an immediate threat to dedicated disk-encryption products because not all computers have TPMs (Trusted Platform Modules), on which BitLocker relies heavily. But in a few years, it could be a contender.