+SYS.2.2.3.A21 Use of the Encrypting File System (H)

SYS.2.2.3.A21 Use of the Encrypting File System (H)

Since the Encrypting File System (EFS) protects the keys used with the passwords of user accounts, secure passwords SHOULD be used. In addition, restrictive access rights SHOULD protect files that are encrypted using EFS. The recovery agent SHOULD be a dedicated account and not the administrator. In this context, the private key of this account SHOULD be secured and removed from the system. Backups of all private keys SHOULD be created. When using EFS with local user accounts, the local password memories SHOULD be encrypted by means of syskey. Windows Defender Credential Guard can also be used as an alternative. Users SHOULD be trained in the correct use of EFS.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information