Endpoint encryption deployed but recovery keys missing

Scenario

Disk encryption is active on several devices, but recovery material cannot be found centrally.

Recommended Resolution Path

1. Audit escrow status before declaring the rollout complete.
2. Identify which devices encrypted before policy-based key backup was enforced.
3. Back up existing keys where possible and remediate noncompliant devices.
4. Treat missing recovery escrow as a risk item, not a paperwork issue.

Technician Notes

Confirm the business impact, document the root cause, and capture any preventative follow-up in the PSA or client knowledge base.