+CON.1.A2 Backups When Using Cryptographic Methods [IT Operation Department] (B)

CON.1.A2 Backups When Using Cryptographic Methods [IT Operation Department] (B)

In backups, cryptographic keys MUST be stored and kept by the IT Operation Department in such a way that unauthorised persons cannot access them. Long-term cryptographic keys MUST be stored outside of the IT systems used.

For long-term storage of encrypted data, checks SHOULD be performed at regular intervals to determine whether the cryptographic algorithms and key lengths used still reflect the state of the art. The IT Operation Department MUST guarantee that data stored in encrypted form can still be accessed after longer periods. The crypto products used SHOULD be archived. The configuration data of crypto products SHOULD be backed up.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information