Hard Drive Encryption

Policy

All computer hard drives should be encrypted.

Scope

This policy applies to all Lullabot employees and contractors.

Compliance

All Lullabot employees and contractors are responsible for encrypting any machines in their possession.

Explanation and Implementation

As a client services company, we often are forced to store sensitive client data such as user information or other proprietary commercial data. While we're insured for this type of data loss by our Technology Errors and Omissions insurance we should do everything in our power to make sure data loss is never an issue we have to confront. One of the most important steps you can take is the encryption of your hard drive. This ensures that if your computer is lost or stolen, the thieves will be unable to access the information stored there. For macOS users, FileVault is generally enabled by default. Confirm that it is by following Apple's instructions. If you're on Linux or Windows, please take similar measures to enable full-disk encryption with BitLocker or an equivalent. Note that Bootcamp on Macs does not support disk encryption at all. If you must use Bootcamp for Lullabot work, create an encrypted disk image with BitLocker or Veracrypt and install portable apps to keep the data secure.