SanDisk Cruzer Enterprise (including the FIPS edition) imposes mandatory access control on all files. They are stored in a secure partition that implements the strongest 256-bit hardware based AES encryption. Since the encryption keys never leave the drive, they are kept safe from software hacking attempts. Stored in a secured area sealed with epoxy glue, the keys are also protected against physical tampering attempts. A strong password provides further protection. If hackers try to guess it, the drive enters Lockdown Mode after a set number of incorrect password attempts. With this level of security, a company can issue Cruzer Enterprise USB flash drives to their employees with the confidence that data stored on their drives will remain secure, even if they are lost or stolen.
Central Management and Control (CMC) server-based software is an innovative solution that utilizes the unique hardware and embedded software capabilities of Cruzer Enterprise USB flash drives. The CMC device agent resides on a company-issued Cruzer Enterprise USB flash drive, enabling the corporate IT department to centrally manage devices both within and outside the corporate environment. CMC protects corporate data by coordinating the complete lifecycle of Cruzer Enterprise drives, from initial user deployment, through tasks such as password recovery and data backup, and finally to drive termination. CMC provides continuous enforcement of company policy, tracking and monitoring activity beyond the corporate network. Now the control and management of mobile devices through corporate networks can be in the safest hands of all − corporate IT personnel.

The RSA SecurID software token is integrated with the SanDisk Cruzer Enterprise USB flash drive, enabling strong authentication to network resources while offering users the native security and high performance of the SanDisk Cruzer Enterprise. This drive is managed and controlled by IT departments with SanDisk central management and control (CMC) software to provide continuous enforcement of company policy, tracking and monitoring activity beyond the corporate network.