If you look at the SolarWind attack, who do they go to help resolve it? They went straight to Microsoft. They wanted to have different vendors, and they wanted it to be able to have that overlap of vendor support on security, but the reality is that everybody looks to Microsoft. In the past, people wanted a layered approach to security. You have to have some type of encryption. If you don't implement this, you have to implement something else.

They should try to wrap it around the data at the file level and not at the device level. So, it is not just the device, it is the data. It is a 'We don't trust anybody' type of deal. So, we're going towards the zero trust model and the zero trust reporting. We should be able to see who has access to it and who has touched a file.

They should add features on that in terms of access control and reporting. I would just like them to look at what other people are doing in terms of encryption as a whole and offer the encryption not only tied to the device, but also to the file level. Currently, BitLocker is basically tied at the device level instead of the data level. They have identity management, but is it tied to encryption? BitLocker is mostly tied to devices, but it would be best for me if I get a piece of data and I am able to encrypt it all the way through using BitLocker. They should look at the third-party enhancements that people are doing, and then take the encryption a step further by adding those features to BitLocker. So, if Microsoft could solve that, it would be awesome. It'd be a lot better if it was all under one mirror or one window, instead of having a couple of different vendors working on it. Usually, Microsoft sees what other third-party companies do and then either adopts it or buys the third-party company, and that's kind of what we're looking into. We're kind of looking at third-party software that does that for us. We're seeing if identity management or IAM allows us to do that. Currently, BitLocker doesn't give us that ability. It basically encrypts it. So, even though someone downloads something to a device, we want the ability to cloak that device or data and bring it back or make that data unusable for that person. The biggest one for us is revoking access. So, we're looking at the ability to wrap around the product with other features. There are solutions we're looking at that do encryption plus X, Y, and Z. Their interoperability with our tools, which are the Microsoft tool, can be improved. It needs to be geared towards more of the wraparound of the zero trust.

Bitlocker license cost