03.13.10 Cryptographic Key Establishment and Management

Statement

Establish and manage cryptographic keys in the system in accordance with the following key management requirements: {{ insert: param, A.03.13.10.ODP.01 }}.

Guidance

Cryptographic keys can be established and managed using either manual procedures or automated mechanisms supported by manual procedures. Organizations satisfy key establishment and management requirements in accordance with applicable federal laws, Executive Orders, policies, directives, regulations, and standards that specify appropriate options, levels, and parameters. This requirement is related to [](#/cprt/framework/version/SP_800_171_3_0_0/home?element=03.13.11) 03.13.11.

Assessment objective

cryptographic keys are established in the system in accordance with the following key management requirements: {{ insert: param, A.03.13.10.ODP.01 }}.

Assessment objective

cryptographic keys are managed in the system in accordance with the following key management requirements: {{ insert: param, A.03.13.10.ODP.01 }}.

Assessment method

• system and communications protection policy and procedures procedures for cryptographic key establishment and management system design documentation system configuration settings cryptographic mechanisms system audit records system security plan other relevant documents or records

Assessment method

• personnel with responsibilities for cryptographic key establishment or management personnel with information security responsibilities system administrators

Assessment method

• mechanisms for supporting or implementing cryptographic key establishment and management

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final