Mobile Encryption Group Discussion and Written Project – CDI East 2006 Rick Smith Rick Wanner

2 June 2014 Agenda Encryption Options Evaluation Criteria Recommendations SDLC Conclusions

2 June 2014 Encryption Options Full-disk Encryption Hardware-based Encryption –Seagate Virtual Disk Encryption File Encryption –EFS in Microsoft Windows XP/2003

2 June 2014 Evaluation Criteria Operating Systems Supported Ease of Deployment Transparent to User Centralized Management Ease of Management Strength of Encryption Key Management and Recovery Audit Logging Cost

2 June 2014 Solution Recommendations SafeBoot –Device Encryption for PC/Laptop Windows Mobile VDisk –Management console Web Based User self-service pasword resets –AES-256 PointSec –Versions for PC PocketPC Removable Media –Management console No user self-service –FIPS compliant

2 June 2014 System Development Life Cycle Documents investigation to date Need to continue with in-house testing of –Key recovery/escrow and password reset –Management console usability –Impact on users Implementation and deployment to follow Need to consider including desktops and servers

2 June 2014 Conclusions Recommendations –SafeBoot –PointSec Implementation starting with high value laptops and mobile devices Policy development also required to support - need to start now