+SYS.2.1.A28 Encryption of Clients (H)

SYS.2.1.A28 Encryption of Clients (H)

If confidential information is stored on clients, at least the sensitive files and select areas of the file system—or better yet, all storage media—SHOULD be encrypted. A separate concept SHOULD be developed for this and special care should be taken when documenting the details of the configuration. In this context, authentication (by means of passwords, PINs, tokens, etc), the storage of recovery information, the drives to be encrypted, and the write permissions to unencrypted media SHOULD be regulated. Access to the key material used MUST be adequately protected.

Users SHOULD be informed of the steps they should take if they lose authentication resources.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.45 Data Loss