NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 4: Telework client device security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 4.3.1: Encrypt all sensitive data at rest on telework devices and removable media

What does 4.3.1 require?

Policy requires that sensitive data at rest on a telework device, and on any removable media the device uses, is encrypted, so that a lost or stolen device does not expose the data; the creation and use of the cryptographic keys follow the same key management policies the organisation applies to other data-at-rest protection.

Maintained by Gerard Blokdyk

Other controls in Section 4: Telework client device security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls