Protecting data on a laptop?

Question

laptops

Good evening, comrades!
I offer you some text for review..
As part of my work, I develop electronic filling for industrial equipment cabins. You know, a generalist who makes drawings in Corel, 3D models in Solid, designs circuits in Proteus and OrCAD, writes firmware for AVR in Atmel Studio, draws printed circuit boards and, in short, a lot of things, I do almost everything by myself ..
I have a small department from 4 people: The head of the department, an electrician, I am a developer, and just a man with hands who helps to weld the necessary iron, solder boards, etc.
Recently, the boss began to appropriate my achievements to himself and pass them off to the directors as his own. Now I am puzzled by the new instrument panel project and my fifth point feels that the boss wants to hit the jackpot at my expense, he can easily have access to my work computer. Of course, I have a password on my account, but this is not a problem for an office system administrator, they can easily get in and ... while I'm not at my workplace (I often go away to different offices for technical issues).
And the other day, I was puzzled by such a question .. If I have my own computer (laptop), then I can easily work, save my files and always keep the laptop at hand so that my achievements and work correspondence do not fall into insidious hands ...
Why all this writing? Moreover, if I have a fairly powerful laptop, with the ability to encrypt data and my own Internet (LTE, for example, I would very much like it), so that it would not be possible to intercept the transmitted data, then my paranoia would calm down a little.
I ask those present here for help in choosing a good laptop, most likely on Windows, with LTE, and a couple of recipes from experts on how to properly protect your data if it suddenly happens that someone still gets into the system.

Answer 1

encrypt everything with Truecrypt, at boot it would ask for a password to start the system, then if you pull out the screw they will not receive data, always lock the computer or send it to sleep before leaving, you can also simply create a container on the screw and connect it as an additional disk when working with the software , closed the container and the whole file will lie on the file system, and what is inside is not visible only the password