68 slides! This must have been an epic or fast paced conference talk. Good points. I think the comments on FDE are spot on; it's almost always about compliance.

68 slides! This must have been an epic or fast paced conference talk. Good points. I think the comments on FDE are spot on; it's almost always about compliance. And I'm reasonably comfortable with SSH access if, and only if, it uses SSH key authentication (no password auth) and that PermitRootLogin is turned off. A Bastion host is a good idea, but "never" is a bit strong.