Provide evidence of encryption on portable and removable media devices.
Guidance: If your organization policy is to block or prevent write access to portable and removable media devices and is enforced, that will also satisfy this control. If that's the case, provide evidence of configuration settings (e.g., Crowdstrike Falcon Device Control settings) demonstrating the prevention of write access or blocking of removable media devices.