AC-19(5)

Requirement

Employ [Selection: full-device encryption; container-based encryption] to protect the confidentiality and integrity of information on [Assignment: organization-defined mobile devices].

Discussion

Container-based encryption provides a more fine-grained approach to data and information encryption on mobile devices, including encrypting selected data structures such as files, records, or fields.

Title

Access Control for Mobile Devices | Full Device or Container-based Encryption
Family

Access Control
NIST 800-53B Baseline(s)
- Moderate
- High

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing access control for mobile devices; system design documentation; system configuration settings and associated documentation; encryption mechanisms and associated configuration documentation; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with access control responsibilities for mobile devices; system/network administrators; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Encryption mechanisms protecting confidentiality and integrity of information on mobile devices].

ID	Assessment Objectives
AC-19(05)	<AC-19(05)_ODP[01] SELECTED PARAMETER VALUE> is employed to protect the confidentiality and integrity of information on <AC-19(05)_ODP[02] mobile devices>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!