An important reality for traveling professionals is that data on the mobile device needs to exist elsewhere as well.  If there is only one copy of the data, there is a strong chance the data will be lost at some point in the future due to a mistake, hardware failure, or device loss.  There are simple configuration steps that can be taken in order to protect against data loss.  One method is to configure a “cloud backup” program such as Carbonite or Mozy. Note: Mozy no longer provides unlimited storage for a set annual price. For this reason, I recommend Carbonite .

There are a few simple ways to configure this, but before I get into these items, I have to cover the 1^st step: encrypt your data!  Most traveling professionals have a laptop with an integrated TPM chip.  The Trusted Platform Module (TPM) is a special hardware module that can securely store an encryption key which is only revealed to the system if the correct question is asked of it. Those of you running Windows Vista Windows 7 (hopefully you are on Win7 by now, though this will work on Vista), can probably configure BitLocker to perform full-volume (whole hard drive) encryption.

The Microsoft Platform provides a capable method for ensuring that data exists both on the laptop (mobile device) and server.  These components include the following:

1. Folder Redirection of the user’s key folders: Documents, Favorites, Desktop, etc.
2. DFS shares (or normal shares) with offline folders configured.  This enables the user to roam with the accessed data cached on the mobile device for modification while offline.
3. SharePoint Workspace – enables the user to travel with content on the SharePoint server enabling enhanced collaboration.

Concerned about users roaming with corporate data on their laptops?  Ensure that every device is encrypted with Bitlocker and ensure that the user’s folders (Documents, Desktop, etc) are encrypted using Encrypted File System (EFS).  In order to protect the encrypted data from loss, configure Data Recovery Agents for EFs and configure BitLocker to store the recovery key in Active Directory for that computer. [EFS Best Practices]

With this configuration, the mobile device (laptop) becomes an easily replaceable commodity and the data exists in multiple places (3-2-1).
3-2-1 is a data protection recommendation which means 3 copies of important data on at least 2 different media types and at least 1 copy off-site.

Remember, you can never have too much data protection.  When you don’t, you will regret it!

Cheers,
Sean