Sekit CSF · Endpoint Security · Policy

RCF-0163Disk encryption

Full disk encryption is formally required on all portable devices and devices that handle sensitive data

Mapping at a glance

RCF-0163Disk encryptionEndpoint Security · Policy

A.5.1Policies for information securityISO/IEC 27001:2022 · Annex A controls A.8.24Use of cryptographyISO/IEC 27001:2022 · Annex A controls PR.DS-01Data-at-rest protectedNIST CSF 2.0 PR.DS-02Data-in-transit protectedNIST CSF 2.0

RCF-0163 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.5.1Policies for information securitysupportsSekit's Disk encryption policy, one of the topic-specific policies A.5.1 expects, requires full disk encryption on every laptop, portable device and machine holding sensitive data.A.8.24Use of cryptographysupportsThis policy facet requires full disk encryption in writing on every laptop and device holding sensitive data, a specific application of the storage-encryption rule A.8.24 sets.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.DS-01Data-at-rest protected PR.DS-02Data-in-transit protected

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Disk encryption evidence

The proof that laptops and devices handling sensitive data have full-disk encryption (BitLocker, FileVault or similar).

From the Sekit evidence catalog

This topic through the other lenses

All Endpoint Security controls

Ask Sekura: “What evidence proves RCF-0163?”

Connect your AI · free MCP

https://sekit.ai/api/mcp/crosswalk

In Claude or ChatGPT, add a custom connector and paste this URL.
Sign in with your email to finish. Free, read-only, no organization required.