What is device compliance?

The University established a requirement to verifiably encrypt all Windows and Mac computers, as well as Apple and Android mobile devices that are used by employees on the campus network.

All devices covered by the security mandate must be encrypted using the operating system's native encryption facilities. For Mac OS FileVault is required, and for Windows desktop operating systems BitLocker is required. Mobile iOS and Android devices must be encrypted using their available built-in technologies.

All macOS and Windows computers and laptops must have BigFix installed in order to verify encryption in an ongoing way that can be centrally audited. 

All faculty, staff and postdoc Apple and Android mobile devices used for Stanford activities on the campus network are also subject to the verifiable encryption requirement. These devices must be configured with the appropriate Mobile Device Management (MDM) security solution.