RE: FIPS key recovery meeting

Members mentioned a few cases where an employee was unable to decrypt >his files, but no one knew of a case where an organization was unable to obtain shared data (e.g., a database), because it was encrypted. Other members seemed reluctant to accept his distinction. They seem to view key recovery as a way to audit proper use of organization assets by employees, or to protect the organization from malicious acts of employees, or to recover data if a custodian is run over by a bus.

pretty funny! think of all the loss of unrecoverable encrypted data from a custodian run over by a bus!