full-disk encryption

term

IT supportsecurityprivacy

Encrypting the entire drive so a lost or stolen machine leaks nothing - BitLocker, FileVault, LUKS - unlocked at boot, transparent after.

Turns 'laptop stolen from car' from a breach notification into a hardware expense.