+SYS.1.1.A34 Hard Disk Encryption (H)

SYS.1.1.A34 Hard Disk Encryption (H)

In case of increased protection needs, a server's storage media should be encrypted using a product or procedure that is considered secure. This SHOULD also apply to virtual machines containing production data. Trusted Platform Module (TPM) SHOULD NOT be the only form of key protection used. Recovery passwords SHOULD be stored in an appropriate and secure location. In case of very high requirements (e.g. regarding confidentiality), full volume or full disk encryption SHOULD be used.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.46 Loss of Integrity of Sensitive Information