SOC 2 · Device management
Fix failing SOC 2 device tests with your MDM
Deixic reads device encryption and screen lock from your MDM, or manages the devices itself, and fixes each laptop that fails.
Tests Deixic fixes in Device management
Criteria touched: CC6.8 Endpoint protection, CC6.1 Logical access, including MFA.
Failing testWhat Deixic doesCriterion
Disk encryption enabled on all laptopsReads encryption state per device and enforces it on devices Deixic manages.CC6.8
Screen lock within 15 minutesReads the lock timeout per device and sets it on devices Deixic manages.CC6.8
Devices enrolled for every employeeMatches the device list to HR employees and lists people without an enrolled device.CC6.1
What runs, what waits, what is yours
Deixic classifies every Device management action before it runs.
Runs within policy
- Enforce disk encryption on a device Deixic manages
- Set the screen lock timeout on a device Deixic manages
Waits for a named approver
- A restart or policy push that interrupts a person's work
Sent to you as a decision
- Wiping or unenrolling a device.
- Changes inside your own MDM, sent to your admin with the exact setting.
Read back and evidence
Each change is read back from Device management, attached to the test in your compliance platform (or kept in Deixic if you have none), and the test runs again.
Deixic reads back
- Encryption and lock settings per device after the change
- The device list against the employee list
Your auditor gets
- Per-device before and after posture
- The enrollment list matched to HR records
- Approver and reason for any restart