Encrypt hard disks and external media
Permanent encryption at pre-operating system level guarantees that data will not be accessible in the event of loss or theft of a laptop.
The encryption of drives (and not of files or individual directories) eliminates the risk of physical access to the data after loss or theft. This guarantees that once a session is closed or a machine is switched off, the physical drive is no longer of value.
This is also important in the context of privacy legislation, more specifically in terms of the reporting obligation of data leaks. This reporting obligation does not apply when the lost computer has been encrypted