CCI-002331

Employ full-device encryption or container encryption to protect the integrity of information on organization-defined mobile devices.

Implementation Guidance

Determine if [AC-19(05)_ODP[01]; one of the following PARAMETER VALUES is selected: {full-device encryption; container-based encryption}] is employed to protect the confidentiality and integrity of information on [AC-19(05)_ODP[02]; mobile devices on which to employ encryption are defined].

Validation Procedures

Examine: [SELECT FROM: Access control policy; procedures addressing access control for mobile devices; system design documentation; system configuration settings and associated documentation; encryption mechanisms and associated configuration documentation; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with access control responsibilities for mobile devices; system/network administrators; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Encryption mechanisms protecting confidentiality and integrity of information on mobile devices].

The controls below (if any) were marked by NIST as being related to CCI-002331.