Best Practice Detail
13-8-8644
Network Operators should require Data Encryption for all employee mobile devices that contain sensitive data. If sensitive information must reside on a mobile device, it should be encrypted. The decryption key should be entered manually; this step should not be automated. A means should exist to recover encrypted data when the decryption key is lost. Require the use of laptop encryption and password-protection.
Status: Rollover New
References/Comments: Source: http://www.k-state.edu/its/security/procedures/mobile.html
Historical events:
- Network Operators
- Wireless
- Cyber Security
- Hardware
- Encryption
- CSRIC VII: Rollover New In CSRIC VII
