Files
probo/controls/physical/hardware/PHY.HW.002_device_screen_lock.md
gearnode 77b6a273cb Add titles and necessity
Signed-off-by: gearnode <bryan@frimin.fr>
2025-01-14 11:08:11 +01:00

1.1 KiB

id, category, revision-version, revision-date, estimate-time, necessity, frameworks
id category revision-version revision-date estimate-time necessity frameworks
PHY.HW.002 physical/hardware 1 2024-01-08 30m mandatory
name sections
soc2
CC2.1
CC6.1
CC6.6
CC6.7
CC6.8
CC7.1
CC7.2

Configure Automatic Screen Lock on Employee Devices

Purpose

Implement automatic screen lock on all employee devices to prevent unauthorized access when devices are unattended, protecting against physical access to company data and resources.

Implementation

All Devices

  1. Configure automatic screen lock:
    • Maximum 5-minute timeout
    • Require password/biometrics to unlock
    • Disable bypass options

MacOS

  1. Apple menu → System Settings → Lock Screen
  2. Enable "Require password after screen saver begins"

Windows

  1. Settings → Personalization → Lock screen
  2. Enable "Require sign-in when PC wakes"

Evidence

Option 1: MDM Solution

  • Screen lock policy compliance report
  • Configuration status dashboard

Option 2: Manual Documentation

  • Screenshots of screen lock settings
  • Device compliance checklist