ud. The school district last year implemented Stoneware’s webNetwork, a unified cloud infrastructure that delivers all files and applications securely through a single user ID and password on any device.
“It’s set up so all files accessed by administrators or teachers are saved to shared drives, which are behind our firewalls, secure and backed up, explains Jim Lax, AISD’s information management support services director. “Users could circumvent the cloud and store drives locally, but they would have to go out of their way to do it, and we also have policies against it.”
The method is also useful if devices are lost or stolen. If anything like that occurs, the IT staff can reimage a new unit with all of the user’s settings within minutes, Lax says.
While the standard method of encrypting data stored on disks is to install an add-on product to do the job, another alternative is growing in popularity. Self-encrypting drives are designed to encrypt all data stored on a drive, within the disk drive controller. The user specifies a password, which is used to encrypt or decrypt the media encryption key. Encryption is transparent to users, who cannot turn it off.
“Self-encrypting drives have proved popular for primary storage of confidential data,” says Eric Ogren of the Ogren Group. “With keys securely stored on the notebook, the IT department can manage the keys. That means that IT can recover data if an employee leaves, or if the disk is archived for a long time.”
Many hard drive manufacturers offer self-encrypting drives, including Seagate, Micron, Fujitsu and Hitachi Data Systems. Many notebook and desktop vendors also offer self-encrypting drives among their products, including HP’s Elite and Pro lines of notebooks and desktops and Lenovo’s ThinkPad line.
So why don’t all school districts request self-encrypting technology? A self-encrypting drive can add a small amount to the price of a computer, and organizations often don’t do a cost-benefit analysis to realize its worth.
“It’s a strategic decision for IT,” Ogren says. “It is easier to purchase a new device with self-encrypting drives than to retrofit already-deployed devices.”