Employee/Executive Travel

The Challenge with Employee/Executive Travel

An executive has an important meeting or presentation away from the office. The laptop or tablet is most often loaded with confidential data….and not just the data for that meeting but all the other confidential corporate data and documents on that device. Besides the hassle of lugging around the equipment during the trip and going through the TSA procedures at each airport stop, the data is at risk during the entire trip. Time spent on unsecure networks and lost laptops and tablets potentially put all of your confidential enterprise data and files in the hands of those with bad intentions. And what do you do when flying internationally and logging into the hotel WiFi system and your system begins to malfunction…. without knowing that you have downloaded malware that steals your corporate secrets and/or personal credentials to penetrate your corporate network? In addition to the obvious damage, you are most likely required by state or federal law to make the security lapse public.

How SPYRUS Helps

SPYRUS Windows To Go drives (“SWTG”) or SPYRUS encrypting storage drives are ideal for the traveling employee, providing a true secure trusted endpoint and protecting all data and files at rest. Your enterprise can enforce access to only your network and prevent local access or data storage. Employees travel light with their corporate image, applications, and policies provisioned on a SWTG drive for use on hotel business center PCs, remote office PCs, or even “Internet Café” environments. In addition, the SPYRUS Windows To Go devices provide an outstanding solution for the challenges involved with supporting thin client or VDI endpoints from remote untrusted computing platforms or even traveling employees operating from their home-based, strongly heterogeneous computing environments. The full spectrum of features provided by the SWTG devices assure a secure, managed endpoint that is an extension of the corporations IT infrastructure.  For highly cost effective, simple application work that either accesses a remote portal or executes a VDI application, the enterprise can supply the traveling employee with a 32 GB SPYRUS Windows To Go drive provisioned with the Read Only (RO) option and a hardware encrypting USB storage drive. The RO option permits the remote employee to boot securely from untrusted computers in global environments and manages the use of external peripherals such as USB and printer ports to prevent data exfiltration, while storing no persistent data and accessing required files from an encrypted storage drive that can also be cryptographically bound to unlock ONLY when operating with a SPYRUS Windows To Go drive.

Some notable features of Windows To Go products for the traveling employee are as follows:

Security for Data at Rest

SPYRUS WorkSafe™ Pro and Secure Portable Workplace™ use an advanced XTS-AES 256 mode of encryption, totally transparent to the user while operating at SSD category speeds. It is the IEEE standard for full disk encryption and much stronger than using software based full disk encryption. For added protection without reducing performance, SPYRUS provides its Defense-in-Depth two-layer encryption protection by enabling optional   BitLocker software encryption, with the BitLocker passwords securely protected in the hardware encrypted memory partition. (SPYRUS Windows To Go Live Drives)

Mitigate Data Leakage and Malware Propagation

For teleworkers performing their duties by accessing cloud based applications or via remote portals, the SWTG devices provisioned for Read-Only provide strong cryptographic security for VDI and thin-client applications by eliminating persistent data changes to the data stored on the drives and also mitigate the persistent threats of exfiltration and malware propagation. (SPYRUS Windows To Go Live Drives)

On or Offline Secure Data Access

SPYRUS hardware-encrypting storage drives provide access to necessary data files to be used with SPYRUS Windows To Go Read-Only drives when travelers need to access data whether working on or offline. (SPYRUS Windows To Go Live Drives)

Device and Data Management

All SWTG products are complemented by the SPYRUS Enterprise Management System (SEMS).   SEMS offers risk management via global, national and organizational control over those important corporate and personal IT information assets which have previously been confined and protected within the physical IT infrastructure of a facility, but now require protection as they travel the world within USB endpoint devices.   SEMS provides central management for SWTG drives with numerous policy driven functions including user access, device enablement/disablement, “kill” inoperability, group or user policy changes, audit recording, and password changes. The SEMS architecture allows an unlimited number of devices to be managed with facilities for multiple administrators based on organizational needs and policies. The persistent audit trail provided by SEMS permits the real time monitoring of an “Acceptable Usage Agreement” for BYOD support.

In-field updates and policy changes can be uniformly administered with SEMS and SCCM with common procedures rather than returning devices to a central “loan pool.”   SEMS ease of use is an important management and cost consideration in deploying scalable device management systems. Under SEMS, System Administrators primarily operate in a demand-based environment. SEMS allows them to take actions for control of devices based on user-driven operational help requests, threat circumstances, or organization-driven policy changes. (SPYRUS Enterprise Management System – SEMS)

We already work with:

Speak to an Expert

If you would like to speak with a SPYRUS expert regarding our products and services, please click on the button below to get all of our contact information. We look forward to assisting you and answering all of your questions.