probo/controls/physical/hardware/PHY.HW.003_device_encryption.md

id, category, revision-version, revision-date, estimate-time, necessity, frameworks

id	category	revision-version	revision-date	estimate-time	necessity	frameworks
PHY.HW.003	physical/hardware	1	2024-01-08	30m	mandatory	name sections soc2 CC2.1 CC6.1 CC6.6 CC6.7 CC6.8 CC7.1 CC7.2

Configure Disk Encryption and Firewall on Employee Devices

Purpose

Ensure all employee devices have disk encryption and firewall protection enabled to secure data at rest and protect network communications from unauthorized access.

Implementation

MacOS

1. Enable FileVault
   • System Settings → Privacy & Security

Windows

1. Enable BitLocker
   • Control Panel → System and Security

Evidence

Option 1: MDM Solution

• Encryption status report
• Device inventory status

Option 2: Manual Documentation

• Screenshots of encryption status
• Device inventory with status