Disk Encryption
What is Disk Encryption?
The encryption of an entire disk or storage volume so that all data stored on it is automatically encrypted and requires authentication to access.
Terms that appear alongside disk encryption
Each of these is named in at least one of the same controls as disk encryption. The number is how many controls name both.
- encryption 4 shared controls
- hardening 2 shared controls
- cis benchmarks 2 shared controls
- secure boot 2 shared controls
- ssh 2 shared controls
- full disk encryption 2 shared controls
- data at rest 2 shared controls
Frameworks that govern disk encryption
What the standards actually require on disk encryption
Requirements naming disk encryption across 6 standards, quoted from the control text.
Devices holding certificates for wireless network access should protect those certificates by using full disk encryption.
new-zealand-information-security-manual-nzism::18.2.11.C.05 · 18.2.11.C.05 Full disk encryption protecting stored device certificates →When whole-disk or partition encryption, rather than database file, column or field encryption, makes PAN unreadable, it must be managed so that: (1) logical access is managed apart from, and independently of, the operating system's own access control and auth...
3.5.1.3 · 3.5.1.3 Disk encryption access independent of OS authentication →The FSP must ensure that endpoint devices including laptops and PCs used to process personal data are secured with disk encryption and data leakage prevention tools.
rbf-guideline-4-protection-of-consumer-data-and-privacy-2024::6e.vii · Paragraph 6e.vii Endpoint disk encryption and leakage prevention →Apply Section 5.3 cryptography including: encryption of data at rest (AES-256 + FIPS 140-3 validated modules + full disk encryption + file-level encryption + database encryption) + data in transit (TLS 1.3 + IPsec + SSH 2.0 + S/MIME + PGP) + key management per...
NISTSP123-4 · Server Cryptography - Encryption, Key Management, Certificates →The architecture protects data stored on assets that could be lost or stolen, for example with full disk encryption or remote wipe, based on data categories.
australian-energy-sector-cyber-security-framework-aescsf::ARCHITECTURE-5g · ARCHITECTURE-5g: Protection for data on assets that may be lost or stolen →Full disk encryption, or partial encryption where access controls will only allow writing to the encrypted partition, is implemented when encrypting data at rest.
ISM-0459 · Full disk or partial encryption at rest →Questions people ask about disk encryption
What is Disk Encryption?
Why is Disk Encryption important for compliance?
Which compliance frameworks address Disk Encryption?
Where can I learn more about Disk Encryption?
See how Disk Encryption applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.