Apply the ISO 27001 Device Standard
With the ISO 27001 device standard, your devices meet the minimum requirements of ISO 27001 in one click. deeploi automatically turns on updates, disk encryption, password rules, screen lock, and the firewall for this. There is nothing to set up one by one.
Before you start
You can use the ISO 27001 device standard if deeploi manages your device settings centrally. You find it under Controls in the navigation. You don't see Controls? Contact hello@deeploi.io.
Which Settings Does the Standard Set?
| Setting | Recommended value | Applies to |
|---|---|---|
| Automatic updates | Enabled | macOS, iOS / iPadOS, Windows |
| Disk encryption | Enabled | macOS, iOS / iPadOS, Windows |
| Require complex password | Enabled | macOS, iOS / iPadOS |
| Minimum password length | 8 characters | macOS, iOS / iPadOS |
| Maximum failed login attempts | 8 attempts | macOS, iOS / iPadOS |
| Auto-lock after | 5 minutes | macOS, iOS / iPadOS |
| Application firewall | Enabled | macOS |
Reaching the limit of failed login attempts locks sign-in on the device for 60 minutes. The device is not erased. On devices that support disk encryption, deeploi saves the recovery key for you.
How Do I Activate the Standard?
Important
Only one change to your device settings can run at a time. If one is already running, you see it in the progress indicator. Wait until it has finished.
- Go to Controls → Compliance packs → ISO 27001.
- Review the settings that still differ from the standard. Each one shows your current value and the recommended value.
- Click Update All Settings.
deeploi saves the new values and sends them to your devices in the background. You see the progress on the page. You can leave it at any time and the change keeps running.
How Do I Read the Status?
| What you see | What it means |
|---|---|
| Configured on the ISO 27001 card | Every setting matches the standard. |
| Not Configured on the ISO 27001 card | At least one setting does not match the standard yet. |
| Set by ISO 27001 next to a setting | The standard set this value, not someone on your team. |
| A warning on a setting | The value was changed after the standard was activated. Your devices no longer meet this setting. |
You can still change any setting afterwards on its own page under Controls. The ISO 27001 page then shows it as no longer matching.