+SYS.2.2.2.A15 File System Encryption Using EFS (H)

SYS.2.2.2.A15 File System Encryption Using EFS (H)

In case of increased protection needs, file systems SHOULD be encrypted. If the Encrypting File System (EFS) is used in this regard, a complex password SHOULD be used to protect the data encrypted using EFS. Files encrypted with EFS SHOULD also be protected by restrictive access rights. The recovery agent SHOULD be a dedicated account and not the administrator account. The private key of this account SHOULD be outsourced to an external storage medium, stored securely, and removed from the corresponding system. In this context, backups of all private keys SHOULD be created. When using EFS with local user accounts, the registry SHOULD be encrypted using syskey. Users SHOULD be trained in the correct use of EFS.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.46 Loss of Integrity of Sensitive Information