+SC-28(03) Cryptographic Keys

SC-28(03) Cryptographic Keys

Control

Provide protected storage for cryptographic keys [Selection: {{ insert: param, sc-28.03_odp.02 }} ; hardware-protected key store].

Discussion

A Trusted Platform Module (TPM) is an example of a hardware-protected data store that can be used to protect cryptographic keys.

Assessment Objective

protected storage for cryptographic keys is provided using [Selection: {{ insert: param, sc-28.03_odp.02 }} ; hardware-protected key store].

Assessment Method

Examine

System and communications protection policy procedures addressing the protection of information at rest system design documentation system configuration settings and associated documentation cryptographic mechanisms and associated configuration documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by SC-28(03) Cryptographic Keys – Assessment Procedure
is blocked by Cryptographic Key Management