Same for us, and we're just 100 heads. At least once a year I have to explain to the auditors that no, we do not clamp our desktop boxes down. Every system is

Same for us, and we're just 100 heads. At least once a year I have to explain to the auditors that no, we do not clamp our desktop boxes down. Every system is set up with full-disk encryption. Auditor: "What happens if someone steals one of those boxes?" Me: "We lose perhaps 1k worth of kit. An annoyance. Someone has to spend time reinstalling their setup. But the data on the disk is illegible garbage. Useless." Auditor: "Have you documented that as an accepted risk?"