Encrypting and locking external drives (USBs, external hard drives) protects Forge Marketing’s sensitive data in case the drive is lost or stolen. This ensures compliance with company security policies and protects client information.

Step-by-Step Guide

Step 1: Use Company-Approved Drives

• Only use external drives provided or approved by Forge Marketing.
• Avoid storing sensitive company data on personal drives unless authorised.

Step 2: Connect the Drive

1. Plug the external drive into your device.
2. Ensure the device is company-managed and running updated antivirus software.

Step 3: Enable Encryption

Windows (BitLocker):

1. Right-click the external drive → select “Turn on BitLocker”.
2. Choose “Use a password to unlock the drive”.
3. Enter a strong password following company guidelines:
4. Minimum 12 characters, mix of letters, numbers, symbols
5. Save the recovery key securely (do not store on the same drive).
6. Click “Start Encrypting”.

Mac (FileVault or Disk Utility):

1. Open Disk Utility → select the external drive.
2. Click “Erase” → choose “Encrypted” format (APFS or Mac OS Extended).
3. Set a strong password and confirm.
4. Click “Erase” to format and encrypt the drive.

Step 4: Lock the Drive

• Always eject the drive safely before disconnecting.
• Store drives in a secure location when not in use.
• Locking is automatic if the drive is encrypted with a password.

Step 5: Best Practices

• Do not share passwords with unauthorised users.
• Backup critical data to company-approved cloud storage as an extra precaution.
• Regularly check encryption status and update passwords if necessary.
• Report lost or stolen drives immediately to IT Security (Daniel Fox / Emma Ward).