The NCSC is urging UK businesses to add a pre-boot PIN to BitLocker after the YellowKey technique showed that encryption alone may not be enough to protect a stolen or lost Windows device.