Microsoft Windows Whole Drive Encryption Solution - Worth Considering
- Encrypts the entire drive and provides a high level of security.
- In an Active Directory environment, you can set up BitLocker to automatically save keys to AD.
- As part of Windows, no additional licensing costs.
- Set up and configuration is relatively easy.
- Uses TPM module to increase security.
Cons
- There is a read/write impact on performance, but the protection is well worth the minor performance hit.
- Protects against data loss and theft, which can be very expensive if PII, SPI, PHI is involved. Fines for this type of loss can be very high, along with the costs of notification, and discovery.
- Cost is included in Windows O/S, without needing additional licensing costs.