+CON.1.A11 Secure Configuration of Crypto Modules [IT Operation Department] (H)

CON.1.A11 Secure Configuration of Crypto Modules [IT Operation Department] (H)

Crypto modules SHOULD be installed and configured securely. All preset keys SHOULD be changed. Afterwards, whether the crypto modules work properly and can actually be operated by users SHOULD be tested.

Furthermore, the requirements for the operational environment SHOULD be defined. If an IT system is changed, whether the cryptographic methods used are still effective SHOULD be tested. The configuration of the crypto modules SHOULD be documented and checked at regular intervals.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.31 Incorrect Use or Administration of Devices and Systems