When I'm performing security assessments, I do see several situations where storage systems or devices are at risk; mainly with laptops and mobile storage devices. We've all heard stories about laptops being stolen where the hard drive wasn't encrypted. Then the information is compromised. Passwords (if they're used) can be reset or circumvented easily enough with readily available hacking tools. Ultimately, laptops are often one of the biggest security problems that an organization must face, along with PDAs, smart phones and other external drives. Encryption at the laptop or mobile device level can prevent a security breach even when the storage device is lost or stolen.
Listen to the Storage Security FAQ audiocast here.
Go to the beginning of the Storage Security FAQ Guide.
This was first published in March 2007