Encrypt data on end-user devices containing sensitive data. Example implementations can include: Windows BitLocker®, Apple FileVault®, Linux® dm-crypt.
| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name | Notes |
|---|---|---|---|---|---|
| CIS-3.6 | Encrypt Data on End-User Devices | mitigates | T1025 | Data from Removable Media |
Comments
Encryption protects copied endpoint data stored on removable media from unauthorized disclosure.
References
|
| CIS-3.6 | Encrypt Data on End-User Devices | mitigates | T1005 | Data from Local System |
Comments
Encryption on endpoints reduces the value of locally collected data and raises the bar for simple exfiltration after collection.
References
|