+CON.1.A2 Backups When Using Cryptographic Methods [IT Operation Department] (B)

CON.1.A2 Backups When Using Cryptographic Methods [IT Operation Department] (B)

In backups, cryptographic keys MUST be stored and kept by the IT Operation Department in such a way that unauthorised persons cannot access them. Long-term cryptographic keys MUST be stored outside of the IT systems used.

For long-term storage of encrypted data, checks SHOULD be performed at regular intervals to determine whether the cryptographic algorithms and key lengths used still reflect the state of the art. The IT Operation Department MUST guarantee that data stored in encrypted form can still be accessed after longer periods. The crypto products used SHOULD be archived. The configuration data of crypto products SHOULD be backed up.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information