diff --git a/controls/physical/hardware/PHY.HW.001_endpoint_antimalware.md b/controls/physical/hardware/PHY.HW.001_endpoint_antimalware.md index 22e97e60b..d8b995498 100644 --- a/controls/physical/hardware/PHY.HW.001_endpoint_antimalware.md +++ b/controls/physical/hardware/PHY.HW.001_endpoint_antimalware.md @@ -32,13 +32,11 @@ systems from malware-based threats. ## Evidence **Option 1**: MDM solution + - Screenshot of fleet malware protection status - Configuration compliance reports **Option 2**: Manual Documentation + - Device inventory with protection status - Configuration screenshots - - - - diff --git a/controls/physical/hardware/PHY.HW.002_device_screen_lock.md b/controls/physical/hardware/PHY.HW.002_device_screen_lock.md index 978440d2d..bbae02067 100644 --- a/controls/physical/hardware/PHY.HW.002_device_screen_lock.md +++ b/controls/physical/hardware/PHY.HW.002_device_screen_lock.md @@ -23,7 +23,7 @@ company data and resources. - Maximum 5-minute timeout - Require password/biometrics to unlock - Disable bypass options - + ### MacOS 1. Apple menu → System Settings → Lock Screen @@ -34,16 +34,14 @@ company data and resources. 1. Settings → Personalization → Lock screen 2. Enable "Require sign-in when PC wakes" - ## Evidence **Option 1**: MDM Solution + - Screen lock policy compliance report - Configuration status dashboard **Option 2**: Manual Documentation + - Screenshots of screen lock settings - Device compliance checklist - - - diff --git a/controls/physical/hardware/PHY.HW.003_device_encryption_and_firewall.md b/controls/physical/hardware/PHY.HW.003_device_encryption_and_firewall.md index 5e94b9378..f9b28d98f 100644 --- a/controls/physical/hardware/PHY.HW.003_device_encryption_and_firewall.md +++ b/controls/physical/hardware/PHY.HW.003_device_encryption_and_firewall.md @@ -22,21 +22,19 @@ access. 1. Enable FileVault - System Settings → Privacy & Security - ### Windows 1. Enable BitLocker - Control Panel → System and Security - - + ## Evidence **Option 1**: MDM Solution + - Encryption status report - Device inventory status **Option 2**: Manual Documentation + - Screenshots of encryption status - Device inventory with status - -