What is device compliance?

The University established a requirement to verifiably encrypt all Windows and Mac computers, as well as Apple and Android mobile devices that are used by employees on the campus network.

All devices covered by the security mandate must be encrypted using the operating system's native encryption facilities. For Mac OS FileVault 2 is required, and for Windows desktop operating systems BitLocker is required. Mobile iOS and Android devices must be encrypted using their available built-in technologies.

For Mac and Windows devices, the Stanford Device Registration (SDR) app must be used to continuously verify encryption in a way that can be centrally audited. Devices that have access to High Risk Data must also be configured for SDR settings management.

All faculty, staff and postdoc Apple and Android mobile devices used for Stanford activities on the campus network are subject to the verifiable encryption requirement. Mobile Device Management (MDM) is Stanford's mobile device security solution.