Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-23 08:58:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 111

Editor pass - Handbook: Adding encryption policy (#5601)

Browse source 
Editor pass for: https://github.com/fleetdm/fleet/pull/5482
This commit is contained in:
Desmi-Dizney 2022-05-05 14:58:57 -05:00 committed by GitHub
parent 922da1592e
commit 74b106a6c7
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
handbook/security-policies.md
View file

@ -134,7 +134,7 @@ Fleet policy requires that:
Fleet requires all workforce members to comply with the encryption policy, such that:
1. The storage drives of all Fleet-owned workstations must be encrypted, enforced by the IT and/or security team.
1. The storage drives of all Fleet-owned workstations must be encrypted, and enforced by the IT and/or security team.
2. Confidential data must be stored in a manner that supports user access logs.
@ -152,9 +152,9 @@ Encryption and key management for local disk encryption of end-user devices foll
#### Protecting data in transit
1. All external data transmission is encrypted end-to-end. This includes, but is not limited to, cloud infrastructure and third party vendors and applications.
1. All external data transmission is encrypted end-to-end. This includes, but is not limited to, cloud infrastructure and third-party vendors and applications.
2. Transmission encryption keys and systems that generate keys are protected from unauthorized access. Transmission encryption key materials are protected with access controls, and may only be accessed by privileged accounts.
2. Transmission encryption keys and systems that generate keys are protected from unauthorized access. Transmission encryption key materials are protected with access controls and may only be accessed by privileged accounts.
3. TLS endpoints must score at least an "A" on SSLLabs.com.