+CON.1.A11 Secure Configuration of Crypto Modules [IT Operation Department] (H)

CON.1.A11 Secure Configuration of Crypto Modules [IT Operation Department] (H)

Crypto modules SHOULD be installed and configured securely. All preset keys SHOULD be changed. Afterwards, whether the crypto modules work properly and can actually be operated by users SHOULD be tested.

Furthermore, the requirements for the operational environment SHOULD be defined. If an IT system is changed, whether the cryptographic methods used are still effective SHOULD be tested. The configuration of the crypto modules SHOULD be documented and checked at regular intervals.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.31 Incorrect Use or Administration of Devices and Systems