Exam CISA topic 1 question 827 discussion

Full disk encryption is a security control that protects data stored on devices such as laptops, desktops, and servers by encrypting the entire hard disk. If a device is stolen or lost, the encrypted data on the disk cannot be accessed without the appropriate decryption key or password. Physical theft of media on which information is stored is a common threat to the confidentiality and integrity of organizational data. By implementing policies and procedures related to full disk encryption, organizations can prevent unauthorized access to sensitive data in the event of a physical theft of a device containing the data. While policies and procedures related to full disk encryption may help prevent other risk scenarios, such as data leakage and unauthorized logical access, other security controls, such as access controls and data loss prevention, are better suited to address these scenarios. Policies and procedures related to full disk encryption are typically implemented to address the risk of physical theft of media on which information is stored.