| 1.1.15 - AirWatch - Enable 'Encrypt phone' | AirWatch - CIS Google Android 4 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 1.9 Ensure 'Encrypt phone' or 'Encrypt tablet' is set to Enabled | MobileIron - CIS Google Android 7 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 1.9 Ensure 'Encrypt phone' or 'Encrypt tablet' is set to Enabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 2.1.9 - AirWatch - Enable 'Require encryption on the device' | AirWatch - CIS Google Android 4 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 18.10.9.1.1 Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled' | CIS Microsoft Windows 11 Enterprise v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.1.1 Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled' | CIS Microsoft Windows 10 Enterprise v2.0.0 L1 + BL + NG | Windows | ACCESS CONTROL |
| 18.10.9.1.1 Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled' - Disabled | CIS Microsoft Windows 11 Stand-alone v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.1.1 Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled' - Disabled | CIS Microsoft Windows 11 Stand-alone v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.1.1 Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.1.1 Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 L2 + BL + NG | Windows | ACCESS CONTROL |
| 18.10.9.1.1 Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.1.10 Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled' | CIS Microsoft Windows 11 Enterprise v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.1.10 Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled' - Disabled | CIS Microsoft Windows 11 Stand-alone v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.1.10 Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.1.10 Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 L2 + BL + NG | Windows | ACCESS CONTROL |
| 18.10.9.1.10 Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL | Windows | ACCESS CONTROL |
| 18.10.9.2.11 Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Disabled' | CIS Microsoft Windows 10 Enterprise v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.2.11 Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Disabled' | CIS Microsoft Windows 10 Enterprise v2.0.0 L2 + BL + NG | Windows | ACCESS CONTROL |
| 18.10.9.2.11 Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Disabled' - Disabled | CIS Microsoft Windows 11 Stand-alone v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.2.11 Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.2.11 Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.2.13 Ensure 'Require additional authentication at startup' is set to 'Enabled' | CIS Microsoft Windows 11 Enterprise v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.2.13 Ensure 'Require additional authentication at startup' is set to 'Enabled' | CIS Microsoft Windows 11 Enterprise v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.2.13 Ensure 'Require additional authentication at startup' is set to 'Enabled' | CIS Microsoft Windows 10 Enterprise v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.2.13 Ensure 'Require additional authentication at startup' is set to 'Enabled' - Enabled | CIS Microsoft Windows 11 Stand-alone v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.2.13 Ensure 'Require additional authentication at startup' is set to 'Enabled' - Enabled | CIS Microsoft Windows 11 Stand-alone v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.2.13 Ensure 'Require additional authentication at startup' is set to 'Enabled' - Enabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL + NG | Windows | ACCESS CONTROL |
| 18.10.9.2.14 Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False' | CIS Microsoft Windows 11 Enterprise v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.2.14 Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False' - Enabled: False | CIS Microsoft Windows 11 Stand-alone v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.2.14 Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False' - Enabled: False | CIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL + NG | Windows | ACCESS CONTROL |
| 18.10.9.2.14 Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False' - Enabled: False | CIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL | Windows | ACCESS CONTROL |
| 18.10.9.3.1 Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled' | CIS Microsoft Windows 11 Enterprise v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.3.1 Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled' | CIS Microsoft Windows 10 Enterprise v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.3.1 Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled' | CIS Microsoft Windows 10 Enterprise v2.0.0 L2 + BL + NG | Windows | ACCESS CONTROL |
| 18.10.9.3.1 Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled' - Disabled | CIS Microsoft Windows 11 Stand-alone v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.3.1 Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled' - Disabled | CIS Microsoft Windows 11 Stand-alone v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.3.1 Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.3.1 Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.3.1 Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL + NG | Windows | ACCESS CONTROL |
| 18.10.9.3.1 Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled' - Disabled | CIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL | Windows | ACCESS CONTROL |
| 18.10.9.3.10 Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Disabled' | CIS Microsoft Windows 11 Enterprise v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.3.10 Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Disabled' | CIS Microsoft Windows 10 Enterprise v2.0.0 BL | Windows | ACCESS CONTROL |
| 18.10.9.3.10 Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Disabled' | CIS Microsoft Windows 10 Enterprise v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.3.10 Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Disabled' - Disabled | CIS Microsoft Windows 11 Stand-alone v2.0.0 L2 + BL | Windows | ACCESS CONTROL |
| 18.10.9.3.10 Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Disabled' - Disabled | CIS Microsoft Windows 11 Stand-alone v2.0.0 BL | Windows | ACCESS CONTROL |
| Android Compliance Policy - Encryption of data storage on device | Tenable Best Practices for Microsoft Intune Android v1.0 | microsoft_azure | ACCESS CONTROL |
| Android Device Configuration - Encryption on storage cards | Tenable Best Practices for Microsoft Intune Android v1.0 | microsoft_azure | ACCESS CONTROL |
| iOS Device Management - Encrypted backup | Tenable Best Practices for Microsoft Intune iOS v1.0 | microsoft_azure | ACCESS CONTROL |
| macOS Device Management - Encryption of data storage on device | Tenable Best Practices for Microsoft Intune macOS v1.0 | microsoft_azure | ACCESS CONTROL |
| Windows Compliance Policy - Encryption of data storage on device | Tenable Best Practices for Microsoft Intune Windows v1.0 | microsoft_azure | ACCESS CONTROL |
