

FES, she says, is ideal for this, although it requires a lot of attention to developing a policy for what gets encrypted and what doesn't, as well as training users on the policy. The shortcoming of FDE, Lambert points out, is that it does not protect data in transit, such as information shared between devices, stored on a portable hard drive or USB, or sent through e-mail. FDE's biggest advantage is that there's no room for error if users don't abide by or don't understand encryption policies. This is different from file or folder encryption systems, where it's up to the user to decide which data needs encrypting. With FDE, data is encrypted automatically when it's stored on the hard disk. Here we'll look at two prime considations in selecting encryption solutions, as well as dos and don'ts suggested by veterans of encryption implementation.įull disk encryption versus file or folder encryption system.
