+CRY-10 Secure Storage of Keys
---+CRY-10.01B
---+CRY-10.01AC
|
1. Overview
CRY-10 Secure Storage of Keys
-
| Summary |
Standard |
|
CRY-10.01B
|
The cloud service provider has documented and implemented technical safeguards for the secure storage of cryptographic keys. This includes ensuring separation of the key management system from the application and middleware layers, defining how authorised users gain access and addressing the geographic residency of keys to comply with contractual, legal, regulatory, and security requirements.
|
|
CRY-10.01AC
|
Based on a risk assessment (cf. OIS-07), the cloud service provider uses a suitable software or hardware security module for the secure storage of cryptographic keys.
|
1.1 References
1.2 Identified Requirements
1.2 Related Regulation
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Regulations
Regulations
| Source |
Regulation |
|