Disk encryption is consistently enabled and verified on all devices within scope
The disk encryption process facet verifies encryption is enabled and recovery keys are escrowed on every in-scope device, the operational check A.8.1 needs.
The process facet turns on and verifies full disk encryption on every in-scope device and escrows recovery keys the company can retrieve.