Library and Technology Services (LTS) has been researching and testing methods for securing desktop computers for many years. More recently, LTS embarked on a project to secure computers through the use of a Whole Disk Encryption software package, PGP. This article addresses the importance of data security and explains the options users have to take advantage of Whole Disk Encryption at Lehigh. |
In response to an increased concern over the potential theft of University Data, LTS has recommended that University computers that contain or access sensitive data be encrypted using the PGP Whole Disk Encryption software (http://www.pgp.com). Whole Disk Encryption software is used to secure data on hard drives by making the data unreadable to anyone who does not have the key to unlock it. This form of encryption is used widely to protect institution data from theft or loss, especially mobile or laptop computers. It is estimated that one computer breach costs an institution approximately $260 per record lost. This equates to over $1,000,000 for every 4000 records lost! It is estimated that over 250 million sensitive data records have been lost by Corporations, Government Agencies and Colleges and Universities in the United States since January 2005. This equals a $65 billion loss for the US economy in a period of 4 years.
During 2008, LTS completed a PGP pilot program encrypting over 60 computers located in various departments throughout campus. In September, LTS recommended the development of a policy to encrypt all Lehigh owned desktop and laptop computers. As this policy is under review by the Lehigh Advisory Council on Information Systems (ACIS), LTS has decided to fund a number of PGP licenses (for a limited time) that can be used to encrypt Lehigh owned laptop computers. Since laptop computers are more vulnerable to loss or theft, LTS is taking a proactive approach to reduce the risk of losing confidential University data. As a University computer user, we encourage you to take advantage of this offer. If you are interested, please enter a work order at: http://www.lehigh.edu/help/. An LTS Computing Consultant will contact you shortly thereafter to schedule a time to install the software and encrypt your hard drive. For more information on encryption at Lehigh, please visit http://www.lehigh.edu/security/encryption/encrypt.html. If you have questions or concerns, please contact your departmental computing consultant or the helpdesk at 8-HELP. |
