[Forgot Password]
Login  Register Subscribe

24128

 
 

131573

 
 

111017

 
 

909

 
 

86402

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-90341-9

Platform: macosx10.10Date: (C)2015-06-23   (M)2018-03-17



Turn on FileVault Disk Encryption (confidentiality and integrity) FileVault Disk Encryption must be enabled. By encrypting the system hard drive, the confidentiality and integrity of any data stored on the system is ensured. Information at rest refers to the state of information when it is located on a secondary storage device (e.g., disk drive and tape drive) within an organizational information system. Mobile devices, laptops, desktops, and storage devices can be either lost or stolen, and the contents of their data storage (e.g., hard drives and non-volatile memory) can be read, copied, or altered. FileVault Disk Encryption mitigates this risk.


Parameter: On/Off


Technical Mechanism: To check if FileVault 2 is enabled, run the following command: sudo fdesetup status If FileVault is 'Off' and the device is a laptop, this is a finding.

References:

Resource IdReference
NISTSC-28
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:25113


OVAL    1
oval:org.secpod.oval:def:25113
XCCDF    1
xccdf_org.secpod_benchmark_general_Mac_OS_X_10_10

© SecPod Technologies