Full disk encryption protects the confidentiality of data at rest. Such solutions come in two parts – an encryption engine component that performs the bulk encryption and decryption of information, and an “Authorisation Acquisition” component covered by this Security Characteristic (SC). This combination protects data against loss or theft of the storage media by ensuring that the user data is properly encrypted and is only accessible if a number of credentials are presented.
Details the features, testing and deployment requirements commercial products must display to achieve certification. This Security Characteristic (SC) is intended for vendors, system architects, developers, evaluation and technical staff operating within the security arena.