Americas

  • United States

Asia

Oceania

roger_grimes
Columnist

When will companies learn to encrypt all portable computers and media by default?

Analysis
Jun 02, 20061 min
Data and Information SecuritySecurity

How many millions of lost and stolen records will it take before encryption is turned on by default for all portable computers and media? EFS is free on Windows. Linux and Unix have open source TrueCrypt. And there are dozens of great commercial solutions. There is no excuse for any professional organization, the least of all auditors, to have portable data unencrypted. It's negligence. Sadly, a few judges have

How many millions of lost and stolen records will it take before encryption is turned on by default for all portable computers and media?

EFS is free on Windows. Linux and Unix have open source TrueCrypt. And there are dozens of great commercial solutions. There is no excuse for any professional organization, the least of all auditors, to have portable data unencrypted. It’s negligence.

Sadly, a few judges have ruled that many of our national guidelines for data protection stored in private companies don’t absolutely require encryption to be used. The guidelines often say that “…customer data needs to be adequately protected…”, but doesn’t require encryption.

I say when your plaintext data is stolen or lost, it shows the data was not adequately protected!

Does someone have to steal and use all of Congress’s personal data for there to be serious data protection laws (instead of all the pointless hearings and counterproductive, competing, watered down leglislation)?

roger_grimes
Columnist

Roger A. Grimes is a contributing editor. Roger holds more than 40 computer certifications and has authored ten books on computer security. He has been fighting malware and malicious hackers since 1987, beginning with disassembling early DOS viruses. He specializes in protecting host computers from hackers and malware, and consults to companies from the Fortune 100 to small businesses. A frequent industry speaker and educator, Roger currently works for KnowBe4 as the Data-Driven Defense Evangelist and is the author of Cryptography Apocalypse.

More from this author