BitLocker Drive Encryption vs. Imperva Data Security

It is well suited especially for users that access or store sensitive/confidential data on their computers. In the case of where users are accessing confidential data over the network, it is highly recommended to use Bitlocker to encrypt the computer. In the case where users are storing confidential data on their computer, it should be a requirement that BitLocker is used/enabled. It would be less appropriate if someone was using a computer and they were not dealing with any sensitive data, or in cases where the computer is used for recreational purposes (browsing the web, playing games, etc).

Incentivized

Compliance to audits and HiTrust certification. It is key in ensuring that our audits are completed in a timely manner with no repeats of data requests and that we also are HiTrust certified at our organization. Personally while the data obfuscation is available I am not sure I would fully trust that the data is completely sanitized if need be. It's not against the Imperva product but more of issue of data being used.

Incentivized

• Encrypts the entire drive and provides a high level of security.
• In an Active Directory environment, you can set up BitLocker to automatically save keys to AD.
• As part of Windows, no additional licensing costs.
• Set up and configuration is relatively easy.
• Uses TPM module to increase security.

Incentivized

• Alerts when suspicious activity is detected
• Records all database transactions for analysis
• Determines activities in stored procedures

• Even if it's the best we tested, I think write performance could be improved. Maybe with dedicated hardware inside the TPM?
• No integration with OS password is a shame as most others have it and it is Microsoft on Microsoft so they can probably do it better then anyone else and safer.
• I wish they would support multiple passwords like FileVault on macOS. If it's a shared computer, you have to give the only password to Bitlocker to both users.

Incentivized

• Navigation of the menus can get confusing pretty quickly. Since there are so many, it is extremely easy to get lost. Almost too many options and data.
• Configuring the agents can be very difficult if you are new to it. Having to save after every single change made to an agent during a configuration can be very tedious. Also having to make sure certain options are checked off in two separate places for a single option is very annoying.
• Navigation of the menus is not always intuitive and not very obvious that the option you are looking change is located in that menu.

Incentivized

Very easy to enable.

Not good nor bad, BitLocker encryption is a symptom of our era, we need to protect ourselves and our data, BitLocker is a tool, as an IT we have to deal with it but it doesn't bring any benefit to my daily operations.

Incentivized

BitLocker Drive Encryption solution offering is cheaper than the one that McAfee offers, it will help you with specific business concerns like "how many encrypted assets do I have?" it's easy to maintain, easy to deploy, and easy to track. It's best suited for companies that are not trying to go far away on the disk encryption matter

Incentivized

• The biggest positive impact it has on ROI is the cost savings, since there is no cost to using the software.
• Since it's widely available to anyone with a Windows computer, and the program is built into the operating system, there is no need to really install anything. This helps to save time of the IT department having to do installs, and also keep track of licensing, etc.

Incentivized

• Allowed us to meet important compliance requirements.
• When protecting critical data, we can see exactly how it's being used and by whom.
• Licensing costs are very reasonable.
• It takes a fair amount of administration to use properly.