Incidents involving unauthorized exposure of confidential or sensitive data are often the result of stolen or lost portable devices. The best way to prevent these exposures is to avoid storing confidential or sensitive data on these removable and easily transportable storage devices. As a general practice, confidential or sensitive data should not be copied to or stored on employee or non-employee owned portable devices or on Alamo Colleges-owned portable devices. However, in circumstances requiring confidential or sensitive data storage on portable devices, data encryption reduces the risk of unauthorized disclosure in the event the device is lost or stolen.

For laptops that contain confidential or otherwise sensitive data, we provide whole disk encryption service. If you or your department stores or processes sensitive or regulated information, such as FERPA, HIPAA, intellectual property on laptops or other portable services, OTS can work with you to get the hard drive encrypted.  In many cases, encryption is required to comply with security policy, legal, regulatory or grant requirements.  Whole disk encryption works by encrypting the data on the entire hard drive, except for a small area needed to boot up the computer.

Whole disk encryption protects data on the hard drive even while it is in the powered down state.  This is useful especially for employees who travel frequently with a device.  Encryption provides a safety mechanism from unauthorized access to your computer or device. 

Bitlocker is used for Microsoft Windows users and FileVault 2 is used for Mac OS users.

SAC Office of Technology Services
              Email Address: sac-helpdesk@alamo.edu
              Main Contact Number (210) 486-0777
              Website Information http://www.alamo.edu/sac/ots

Request technical assistance by submitting a Footprints work order.  Whole Disk Encryption protects only files stored on the computer.  It does not provide encryption for files that are:

• Sent via email.
• Stored on separate flash drive/thumb drive/USB drive.
• Stored on the shared network drive. (Once you move an encrypted file to a shared drive, it is no longer encrypted.)

Note: Please make sure the encrypted laptop is not logged in and left unattended.  Files are accessible and the data may not be protected.

District Encryption Standard on Encryption:  Encryption Standards, Procedures and Guidelines