Achieving key security objectives
The HP ProtectTools modules can work together to provide solutions for a variety of security issues, including the following key security objectives:
●Protecting against targeted theft
●Restricting access to sensitive data
●Preventing unauthorized access from internal or external locations
●Creating strong password policies
Protecting against targeted theft
An example of this type of incident would be the targeted theft of a computer containing confidential data and customer information in a cubicle or open environment. The following features help protect against targeted theft:
●The
◦“Enabling and disabling smart card
◦“Enabling and disabling
◦“Assigning a name to a Java Card on page 39”
◦“Drive Encryption for HP ProtectTools on page 52”
●DriveLock helps ensure that data cannot be accessed even if the hard drive is removed and installed into an unsecured system. See “Enabling and disabling DriveLock hard drive protection on page 48.”
●The Personal Secure Drive feature, provided by the Embedded Security for HP ProtectTools module, encrypts sensitive data to help ensure it cannot be accessed without authentication. See the following procedures:
◦Embedded Security “Setup procedures on page 28”
◦“Using the Personal Secure Drive on page 31”
Restricting access to sensitive data
Suppose a contract auditor is working onsite and has been given computer access to review sensitive financial data; you do not want the auditor to be able to print the files or save them to a writeable device such as a CD. The following feature helps restrict access to data:
●The DriveLock helps ensure that data cannot be accessed even if the hard drive is removed and installed into an unsecured system. See “Enabling and disabling DriveLock hard drive protection on page 48.”
Preventing unauthorized access from internal or external locations
If a PC containing confidential data and customer information is accessed from an internal or external location, unauthorized users may be able to gain entry to corporate network resources or data from
4 Chapter 1 Introduction to security | ENWW |
