Requirement
"Information stored on, processed by or accessible via user end point devices shall be protected."[1]
Explanation
Ensure that endpoints such as Windows and Mac computers have encrypted hard drives are password protected and have other essential security controls in place. It is advisable to use the CIS Benchmark Microsoft Security baseline for Windows 10/11 or DISA Security Technical Implementation Guides recommended security controls to secure the organization's workstation's.