Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

What should be done for platforms and operating systems that are not supported by FIPS 140-2-certified encryption?

April 26, 2017encryption FIPS Operating Systems platforms supported

0

Posted

What should be done for platforms and operating systems that are not supported by FIPS 140-2-certified encryption?

1 Answer

0

Posted

All laptops and tablets ought to be encrypted. Whenever possible, platforms should be changed to one supported by a FIPS 140-2-certified whole-disk encryption package. If the platform cannot be changed, the laptop or tablet should be secured with compensating controls and validated by NIST. Software such as Pointsec® Media Encryption (PME) can be used to encrypt files individually. PME allows encrypted files to be sent to non-PKI recipients via e-mail. The USB capability is useful as well. Both functions are included in the Pointsec Full-Disk Encryption (FDE) license. Each registry ought to determine which encryption products will be supported.