|
Posted by Saqib Ali on July 6, 2006, 10:50 pm
If you were Registered and logged in, you could reply and use other advanced thread options
http://digg.com/security/U.S._gov_t_mandates_laptop_security
In addition to NIST checklist, the following are required:
1. Encrypt all data on mobile computers/devices which carry agency data
unless the data is determined to be non-sensitive, in writing, by your
Deputy Secretary or an individual he/she may designate in writing;
2. Allow remote access only with two-factor authentication where one of
the factors is provided by a device separate from the computer gaining
access;
3. Use a "time-out" function for remote access and mobile devices
requiring user re-authentication after 30 minutes inactivity; and
4. Log all computer-readable data extracts from databases holding
sensitive information and verify each extract including sensitive data
has been erased within 90 days or its use is still required.
Also see the following for a list of Full Disc Encryption products:
http://digg.com/security/List_of_Full_Disc_Encryption_products
| 
XML site map