+SC-12(01) Availability

SC-12(01) Availability

Control

Maintain availability of information in the event of the loss of cryptographic keys by users.

Discussion

Escrowing of encryption keys is a common practice for ensuring availability in the event of key loss. A forgotten passphrase is an example of losing a cryptographic key.

Assessment Objective

information availability is maintained in the event of the loss of cryptographic keys by users.

Assessment Method

Examine

System and communications protection policy procedures addressing cryptographic key establishment, management, and recovery system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities organizational personnel with responsibilities for cryptographic key establishment or management

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by SC-12(01) Availability – Assessment Procedure
is blocked by Public Key Infrastructure (PKI) Availability
is blocked by Cryptographic Key Loss or Change