
SHOULD SENSITIVE DATA BE STORED ON LAPTOPS?
Every month seems to bring another episode of sensitive personal information escaping into the wild because a corporate or government laptop computer is lost or stolen. A common response is a lot of hand-wringing over how the data should have been encrypted.
Ref. https://www.cnn.com/2006/TECH/ptech/07/11/l...y.ap/index.html
The biggest problem with laptops is simply physical security. If I have a laptop, I can get into it hands down, no problem. If it has a bios security, I can take a panel off the back, remove the battery, and reset the bios so no password exists. Then all I need is a linux windows admin password disc and I can reset the administrator password and I'm in with rights to all data on the machine. Physical security will remain the issue as long as no finger print or other biometric security exists.