Encryption verification for laptops field checklist
Overview
Assuming Intune policy applied ≠ disk actually encrypted—spot verify during onsite.
Checks
BitLocker on + protectors healthy; FileVault on macOS; escrow keys reachable test quarterly sample.
Tools
manage-bde -status or GUI screenshot for audit attach.
Failure handling
Force encryption + document outage window if PIN required training.
Compliance mapping
Map checklist rows to HIPAA §164.312(a)(2)(iv) evidence binder example.
Reporting
Random 5% client fleet monthly—statistically escalate if failure >2%.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...