I'm reviewing a ISO27001 Gap Analysis workbook and under Control A.11.2.7 someone has left the note:
If full disk encryption (FDE) is used on a device is there a policy in place to ensure the encryption is strong enough to cover the entire disk (including slack space, swap files and memory)
I can't find anything on google/stack around why FDE might miss slack swap and memory, does anyone know or can anyone explain why?