header bg

Scan QR code or get instant email to install app

Question:

David has given the BitLocker encryption keys for computers in his department to the security office of his organization so that they can decrypt computers in the event of an investigation or breach. What is the term used to describe this concept?

A Key escrow.
explanation

Key escrow refers to the practice of providing encryption keys to a third party, who can then release them to an authorized party if certain conditions are met. Although this means that the keys are no longer under the control of the owner or responsible party, in many cases, the necessity to have a recoverable or accessible way to access the keys supersedes the requirement to keep the keys in the hands of a single individual or organization. The other options listed are fabricated, but you may come across the term "key recovery," which is a process wherein law enforcement or other authorized parties can retrieve keys when necessary using an access or decryption key that may not be the same key used by the original encryption user.

Related Information

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

*