03.13.11 Cryptographic Protection

Statement

Implement the following types of cryptography to protect the confidentiality of CUI: {{ insert: param, A.03.13.11.ODP.01 }}.

Guidance

Cryptography is implemented in accordance with applicable laws, Executive Orders, directives, regulations, policies, standards, and guidelines. FIPS-validated cryptography is recommended for the protection of CUI.

Assessment objective

the following types of cryptography are implemented to protect the confidentiality of CUI: {{ insert: param, A.03.13.11.ODP.01 }}.

Assessment method

• system and communications protection policy and procedures procedures for cryptographic protection system design documentation system configuration settings cryptographic module validation certificates list of FIPS-validated cryptographic modules system audit records system security plan other relevant documents or records

Assessment method

• personnel with responsibilities for cryptographic protection personnel with information security responsibilities system developers system administrators

Assessment method

• mechanisms for supporting or implementing cryptographic protection

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

3. Свързани регулации

Свързани задачи

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final