The Chief Executive Officer (CEO) of a major defense contracting company a traveling overseas for a conference. The CEO will be taking a laptop. Which of the following should the security…

Remote wipe requires the device to have network connectivity to receive the wipe command, which cannot be guaranteed if the device is stolen and kept offline, making it an unreliable confidentiality control.

Full device encryption (such as BitLocker on Windows) encrypts all data on the storage device, rendering it unreadable without the proper decryption key or credentials. Even if the physical drive is removed and placed in another system, the data remains protected. This is the most direct technical control for ensuring data confidentiality in a lost or stolen device scenario.

A BIOS password prevents unauthorized booting of the device but can be bypassed by physically removing the hard drive and accessing it in another system, so it does not protect the confidentiality of the stored data.

GPS tracking helps locate a lost or stolen device but does not prevent an attacker from accessing or reading the data on the device, so it provides no confidentiality protection.