I like that BitLocker allows you to encrypt removable media as well. BitLocker will give you peace of mind by keeping your data safe - especially if employees lose their laptops, or if laptops are stolen - providing you with confidence that no data will be compromised. BitLocker consists of agent initialization and robust disk encryption algorithms, and does a good job with reporting on compliance. It is basically the global standard solution for drive encryption and it successfully fulfills regulatory needs in terms of data protection. Microsoft BitLocker is very intuitive and easy to maintain. It gives you additional options for less than some of the Microsoft alternatives.īitLocker is just not FREE if you are in a regulated industry since it needs management to truly be secure the device and prove compliance. It is built into the BIOS of the major laptop brands and just needs the key to activate it.Īlso, ESET is a quality product for encryption. Other Bitlocker management can be found with SOPHOS and I believe TrendMicro as well.Īnother tool to consider, especially for laptops, is ABSOLUTE software. If you have Microsoft 365 Business premium you have additional controls over Bitlocker or, M365 E3/E5, Windows Enterprise E3/E5 all have MDOP. You also need to enforce secure password management, user training on passwords and regular password changes. You will need to use something like BitLocker Administration and Monitoring (MBAM) which is part of MDOP (Microsoft Desktop Optimization Pack) or another tool that will manage Bitlocker and give you proof the device is encrypted in the event of a lost or stolen device. Are you in a regulated industry? If so using the native BitLocker is not enough to prove compliance.

Eset encryption