ASSOCIATED DRATA CONTROL
This test is part of the Hard-Disk Encryption control that ensures all company-issued computers and workstations have encrypted hard disks, if using the Drata Agent. If using one of the MDM connections, the test ensures all company-issued computers and workstations are compliant with the mapped hard disk encryption device policy.
WHAT TO DO IF A TEST FAILS
If Drata finds computers or workstations that 1) do not have encrypted hard disks or 2) aren’t compliant with the mapped hard disk encryption device policy, the test will fail. With a failed test you will receive a list of computers/workstations that do not have encrypted hard disks or are not compliant with the mapped hard disk encryption device policy.
To remediate a failed test, you will need to advise the owners of these computers/workstations to properly configure their operating systems to enable hard-disk encryption or to be compliant with the mapped device policy.
STEPS TO REMEDIATE
If you are using the Drata Agent, ensure that the user has installed the Drata Agent and that the Agent is currently running on their system.
If you are using one of the MDM connections, ensure that:
The hard disk encryption policy exists
The hard disk encryption policy maps to the user’s device
The user’s device is compliant with the hard disk encryption policy
Alternatively:
Navigate to the Personnel page
Select a Personnel and click to open the detail drawer
Upload evidence that the personnel has encrypted their hard disk