+SYS.2.4.A4 Use of Hard Drive Encryption (S)

SYS.2.4.A4 Use of Hard Drive Encryption (S)

Hard drives SHOULD be encrypted, particularly for portable Macs (e.g. MacBooks). If the FileVault function integrated into macOS is used for this, the key material MUST NOT be stored online at Apple. The recovery keys produced by FileVault MUST be stored in a secure place. Whether an organisational recovery key should be used for FileVault SHOULD be checked.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.16 Theft of Devices, Storage Media and Documents
blocks G 0.17 Loss of Devices, Storage Media and Documents
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems