03.13.11 Cryptographic Protection

Statement

Implement the following types of cryptography to protect the confidentiality of CUI: {{ insert: param, A.03.13.11.ODP.01 }}.

Guidance

Cryptography is implemented in accordance with applicable laws, Executive Orders, directives, regulations, policies, standards, and guidelines. FIPS-validated cryptography is recommended for the protection of CUI.

Assessment objective

the following types of cryptography are implemented to protect the confidentiality of CUI: {{ insert: param, A.03.13.11.ODP.01 }}.

Assessment method

• system and communications protection policy and procedures procedures for cryptographic protection system design documentation system configuration settings cryptographic module validation certificates list of FIPS-validated cryptographic modules system audit records system security plan other relevant documents or records

Assessment method

• personnel with responsibilities for cryptographic protection personnel with information security responsibilities system developers system administrators

Assessment method

• mechanisms for supporting or implementing cryptographic protection

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final