What MITRE D3FEND D3-DENCR: Disk Encryption (Defensive Tactic - Harden -> Platform Hardening) requires
MITRE D3FEND D3-DENCR (Disk Encryption) is a defensive technique that protects data at rest by encrypting block-level storage volumes. DENCR counters ATT&CK techniques T1486 (Data Encrypted for Impact - prevents extortion leverage from offline storage seizure), T1565 (Data Manipulation), T1052 (Exfiltration Over Physical Medium), T1025 (Data from Removable Media), and T1530 (Data from Cloud Storage Object). Full-disk encryption is mandated under HIPAA Security Rule 164.312(a)(2)(iv), GDPR Article 32, PCI DSS Req 3.5.1, NIST SP 800-53 SC-28, ISO 27001 A.8.24, and US state breach safe-harbour provisions (CCPA, Texas, Massachusetts) that exempt encrypted-data losses from notification.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://d3fend.mitre.org/technique/d3f:DiskEncryption/
SHA-256 integrity: 2e34e1e38f15103240e37886ae337d111bad4b40c157ea8f13385e067ddcf7f4
Primary Citations — 8 traced to source
- MITRE D3FEND Defensive Technique D3-DENCR: Disk Encryption (https://d3fend.mitre.org/technique/d3f:DiskEncryption/)
- NIST SP 800-53 Rev 5: SC-28 (Protection of Information at Rest) including SC-28(1)
+ 6 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-d3fend-d3-dencr-disk-encryption.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-d3fend-d3-dencr-disk-encryption.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-d3fend-d3-dencr-disk-encryption
- Back to registry: Browse all 10,085 compliance nodes