First pass traveling page #10
Conversation
src/traveling.md
Outdated
| ### Physical | ||
|
|
||
| 1. You MUST NEVER leave a device unlocked AND unattended. | ||
| 1. You MUST use full disk encryption on any device which supports it. |
There was a problem hiding this comment.
We should be recommending this somehwere else (eg work devices)? or similar?
And here just refer to it.
There was a problem hiding this comment.
The work devices page is geared specifically towards laptops with EDR; aren't those going to be distributed already configured for use?
There was a problem hiding this comment.
Correct, but not everyone in the ecosystem will have that.
There was a problem hiding this comment.
So should I add a section to work_devices.md after EDR that discusses non-EDR ways of hardening laptops? What other than full disk encryption would be part of that section?
There was a problem hiding this comment.
I could also add a quick note about full disk encryption inside the "Deploying hardened laptops" subsection, if we don't have enough for a full section
There was a problem hiding this comment.
Yeah I think we can just say full-disk encryption and "strong" password (eg linking to some nist policy)
…tion on network attacks relating to travel
…page, and link from travel page
…page, and link from travel page
2 participants
No description provided.