1. Mobile Encryption Group Discussion and Written Project – CDI East 2006 Rick Smith rdsmith@mac.comrdsmith@mac.com Rick Wanner rwanner@pobox.comrwanner@pobox.com

2. 2 June 2014 Agenda Encryption Options Evaluation Criteria Recommendations SDLC Conclusions

3. 2 June 2014 Encryption Options Full-disk Encryption Hardware-based Encryption –Seagate Virtual Disk Encryption File Encryption –EFS in Microsoft Windows XP/2003

4. 2 June 2014 Evaluation Criteria Operating Systems Supported Ease of Deployment Transparent to User Centralized Management Ease of Management Strength of Encryption Key Management and Recovery Audit Logging Cost

5. 2 June 2014 Solution Recommendations SafeBoot –Device Encryption for PC/Laptop Windows Mobile VDisk –Management console Web Based User self-service pasword resets –AES-256 PointSec –Versions for PC PocketPC Removable Media –Management console No user self-service –FIPS 140-2 compliant

6. 2 June 2014 System Development Life Cycle Documents investigation to date Need to continue with in-house testing of –Key recovery/escrow and password reset –Management console usability –Impact on users Implementation and deployment to follow Need to consider including desktops and servers

7. 2 June 2014 Conclusions Recommendations –SafeBoot –PointSec Implementation starting with high value laptops and mobile devices Policy development also required to support - need to start now