Laptop Encryption
Per a campus-wide mandate from President Garrison's office, all laptop computers used for UAB business (including management-authorized personal machines) must be encrypted by May 31, 2009. If you utilize a laptop computer for UAB Hospital/Health System work, you are required to do this, no matter how the computer was purchased. Please note that this mandate refers to any UAB-related use of the computer, not just research or other work that includes PHI.
The primary method of securing laptop computers is via a product called PGP Whole Disk Encryption. Pre-Intel Mac OS X computers, which are not supported by this product, may be encrypted using Apple's FileVault. Per University and Health System policy, any computers that cannot be encrypted though one of these methods will have to be removed from service.
For complete instructions, please visit Information Security.
After encryption has been activated, you will need to enter your PGP password to boot the computer. (If you are concerned about forgetting your password, you may store it in a sealed envelope in a departmental safe.) As well, you must ensure that your computer is protected when it is on by activating password protection for wake from sleep. Please see your computer's software documentation for details.
Finally, it is required that we inventory every laptop computer to which these policies apply, including recording serial numbers and user names and verifying that PGP whole-disk or FileVault encryption has been activated. This email address is being protected from spambots. You need JavaScript enabled to view it. will be responsible for maintaining this inventory, but you will have to bring your computer to her office to do this.
