Security controls (BitLocker)

We provide a comprehensive list of vulnerabilities and remediation options on this page for our visitors’ reference. However, we would like to inform you that EireaNet, Inc. offers a free of charge automated mitigation service to our monthly subscribers. This service is designed to detect and remediate any vulnerabilities or other security issues on your system. Our mitigation service is constantly updated with the latest threats and vulnerabilities, ensuring that our subscribers are always protected against the latest security threats.

In addition to the automated mitigation service, EireaNet, Inc. also provides personalized consulting for businesses that require a more tailored approach to their security needs. Our team of experts can conduct thorough security assessments and provide customized recommendations to address specific vulnerabilities within your system. This personalized consulting service aims to empower businesses with the knowledge and tools to enhance their overall security posture and mitigate potential risks effectively.

We understand the critical importance of staying ahead of evolving security threats, which is why we remain dedicated to continuously updating our mitigation service and staying informed about emerging vulnerabilities. By offering both automated and personalized solutions, we aim to cater to the diverse security needs of our subscribers, ultimately contributing to a more secure digital environment for all.

Resume BitLocker protection on all drives

Description

BitLocker Drive Encryption is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned computers.

This security control is only assessed for machines on Windows 10, version 1803 or later, and Windows Server 2019.

Potential risk

Drives that aren’t encrypted are exposed to unauthorized access to user data and to data tampering while the system is offline.

Remediation options

Option 1 

Example

PowerShell

PS C:\> Resume-BitLocker -MountPoint "C:"

This command resumes BitLocker protection for the C: drive.

Option 2

Example

PowerShell

PS C:\>Get-BitLockerVolume | Resume-BitLocker

This command gets all the BitLocker volumes for the current computer by using the Get-BitLockerVolume cmdlet and passes them to Resume-BitLocker by using the pipeline operator. The command restores protection for all BitLocker volumes.