MDM-02—Mobile Device Encryption

>Control Description

Mobile devices (i.e., laptops, smartphones, tablets) that are used to access data from Organization internal resources are encrypted.

Theme

Process

Type

Preventive

Policy/Standard

Mobile Device Policy

>Implementation Guidance

1. Ensure that mobile devices are encrypted and is configured with the Mobile Device Management (MDM) tool.

>Testing Procedure

1. Review the Mobile Device Management (MDM) tool and ensure that a device encryption tool is enabled for all registered devices. 2. Review a sample of mobile devices and verify that device encryption tools are enabled on devices and cannot be disabled by the end user.