What it covers. NIST guidance on storage encryption for end user devices such as laptops and removable media. It explains full disk encryption, virtual disk and volume encryption and file and folder encryption, and how to plan, implement and manage them.
In practice. Applying it well means choosing encryption suited to the device and threat, usually full disk encryption for laptops, enforcing it centrally and managing recovery keys securely. Removable media is encrypted or blocked. Evidence includes encryption policy, compliance reports from device management and procedures for key recovery.
Common gaps. Common gaps are devices that were never encrypted, recovery keys stored insecurely and removable media left uncontrolled. The publication dates from 2007, so product details are outdated, but the principles hold.