SB044 Enables encryption
Encrypting a device prevents the data on the device from being accessed should the device be lost or stolen. Some devices come with encryption turned on by default. Other devices must be encrypted manually.
Why is it important?
Encryption scrambles data. This makes it unreadable and only accessible to those with the decryption key or password. Without it, if a device is lost, the storage may be removed and data inside read.
By enabling encryption for devices, this ensures any data saved to the device is safe.
Priority Tier
Behaviours in SebDB are ranked by their impact on risk. Tier 1 behaviours have the biggest impact, Tier 4 behaviours the least.
Risk Mitigated
Data Theft
Data theft is the intentional stealing of data.
Further reading
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/encryption/encryption-and-data-storage/ https://www.ncsc.gov.uk/collection/10-steps-to-cyber-security?curPage=/collection/10-steps-to-cyber-security/the-10-steps/removable-media-controls