+CRY-14.01B

CRY-14.01B

The cloud service provider has documented and implemented procedures to deactivate cryptographic keys. These procedures ensure that:

1. Expired keys are no longer used for encryption purposes, but may still be used for decryption if necessary;

2. Expired keys are no longer used for signature creation, but may still be used for signature verification;

3. Deactivated keys are eventually destroyed when they are no longer required, with relevant metadata retained for auditing; and

4. All actions related to key deactivation and destruction are recorded in the key management system to maintain a detailed audit log.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by Content of Event Logs
is blocked by Cryptographic Key Management
is blocked by Digital & Non-Digital Media Disposal