+SC-28(03) Cryptographic Keys
|
SC-28(03) Cryptographic Keys
Control
Provide protected storage for cryptographic keys [Selection: {{ insert: param, sc-28.03_odp.02 }} ; hardware-protected key store].
Discussion
A Trusted Platform Module (TPM) is an example of a hardware-protected data store that can be used to protect cryptographic keys.
Assessment Objective
protected storage for cryptographic keys is provided using [Selection: {{ insert: param, sc-28.03_odp.02 }} ; hardware-protected key store].
Assessment Method
Examine
System and communications protection policy
procedures addressing the protection of information at rest
system design documentation
system configuration settings and associated documentation
cryptographic mechanisms and associated configuration documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
1. Übersicht
1.1 Referenzen
1.2 Identifizierte Anforderungen
1.3 Zugehörige Regulierungen
2. Identifizierte Anforderungen
Anforderungen
| Quelle |
Anforderung |
3. Zugehörige Regulierungen
Regulierungen
| Quelle |
Regulierung |
Verknüpfte Vorgänge
|