SekitCrosswalk
ENES
Start now
Sekit CSF · Endpoint Security · Technical

RCF-0165Disk encryption

Technical controls enforce disk encryption and can verify encryption status across the entire device fleet

Mapping at a glance
RCF-0165Disk encryptionEndpoint Security · Technical
A.8.1User endpoint devicesISO/IEC 27001:2022A.8.24Use of cryptographyISO/IEC 27001:2022PR.DS-01Data-at-rest protectedNIST CSF 2.0PR.DS-02Data-in-transit protectedNIST CSF 2.0

RCF-0165 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.1User endpoint devicesenablesThe disk encryption technical facet enables fleet-wide encryption status to be read from the management platform rather than taken on trust device by device.A.8.24Use of cryptographysupportsThe technical facet enforces disk encryption through the device management platform and reads fleet-wide encryption status rather than trusting per-device claims.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.DS-01Data-at-rest protectedPR.DS-02Data-in-transit protected

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Disk encryption evidence
The proof that laptops and devices handling sensitive data have full-disk encryption (BitLocker, FileVault or similar).
From the Sekit evidence catalog

This topic through the other lenses

RCF-0163 PolicyRCF-0164 Process

All Endpoint Security controls

Endpoint Security
Ask Sekura: “What evidence proves RCF-0165?”
Also via MCP, free with account