HP 2 Base Model manual Achieving key security objectives, Protecting against targeted theft

Achieving key security objectives

The HP ProtectTools modules can work together to provide solutions for a variety of security issues, including the following key security objectives:

●Protecting against targeted theft

●Restricting access to sensitive data

●Preventing unauthorized access from internal or external locations

●Creating strong password policies

Protecting against targeted theft

An example of targeted theft would be the theft of a computer containing confidential data and customer information at an airport security checkpoint. The following features help protect against targeted theft:

●The pre-boot authentication feature, if enabled, helps prevent access to the operating system. Refer to the following chapters:

◦Security Manager for HP ProtectTools

◦Embedded Security for HP ProtectTools

◦Drive Encryption for HP ProtectTools

●The Personal Secure Drive feature, provided by the Embedded Security for HP ProtectTools module, encrypts sensitive data to help ensure that it cannot be accessed without authentication. Refer to the following chapter:

◦Embedded Security for HP ProtectTools

●Computrace can track the computer's location after a theft. Refer to the following chapter:

◦Computrace for HP ProtectTools

Restricting access to sensitive data

Suppose a contract auditor is working onsite and has been given computer access to review sensitive financial data; you do not want the auditor to be able to print the files or save them to a writable device such as a CD. The following feature helps restrict access to data:

●Device Access Manager for HP ProtectTools allows IT managers to restrict access to writable devices so sensitive information cannot be printed or copied from the hard drive onto removable media.

Preventing unauthorized access from internal or external locations

Unauthorized access to an unsecured business computer presents a very real risk to corporate network resources such as information from financial services, an executive, or the R&D team, and to

8 Chapter 1 Introduction to security