+CRY-14 Secure Deactivation of Cryptographic Keys
---+CRY-14.01B

CRY-14 Secure Deactivation of Cryptographic Keys

1. Přehled

CRY-14.01B

The cloud service provider has documented and implemented procedures to deactivate cryptographic keys. These procedures ensure that:

1. Expired keys are no longer used for encryption purposes, but may still be used for decryption if necessary;

2. Expired keys are no longer used for signature creation, but may still be used for signature verification;

3. Deactivated keys are eventually destroyed when they are no longer required, with relevant metadata retained for auditing; and

4. All actions related to key deactivation and destruction are recorded in the key management system to maintain a detailed audit log.

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace