You act like this policy was intended as punishment instead of as risk mitigation. Mandating full disk encryption is easy for IT to enforce. A policy of not pu

You act like this policy was intended as punishment instead of as risk mitigation. Mandating full disk encryption is easy for IT to enforce. A policy of not putting sensitive information on laptops is valuable, but difficult to enforce. Encryption is a sound way to reduce the risk of harm when that policy is inevitably broken. Full disk encryption also been the company-wide policy of everywhere I've worked in recent memory, fwiw.