GRCA Planeth
Niste prijavljeni
Prijava
Početak
Izvori
›
SC-28 Protection of Information at Rest
›
Standard - SC-28(03) Cryptographic Keys
+SC-28(03) Cryptographic Keys
SC-28(03) Cryptographic Keys
Control
Provide protected storage for cryptographic keys [Selection: {{ insert: param, sc-28.03_odp.02 }} ; hardware-protected key store].
Discussion
A Trusted Platform Module (TPM) is an example of a hardware-protected data store that can be used to protect cryptographic keys.
Assessment Objective
protected storage for cryptographic keys is provided using [Selection: {{ insert: param, sc-28.03_odp.02 }} ; hardware-protected key store].
Assessment Method
Examine
System and communications protection policy procedures addressing the protection of information at rest system design documentation system configuration settings and associated documentation cryptographic mechanisms and associated configuration documentation system audit records system security plan other relevant documents or records
Interview
System/network administrators organizational personnel with information security responsibilities
1. Pregled
Naslov
Standard
1.1 Reference
1.2 Utvrđeni zahtjevi
1.3 Povezani propisi
2. Utvrđeni zahtjevi
Zahtjevi
Izvor
Zahtjev
3. Povezani propisi
Propisi
Izvor
Regulativa
Povezani zadaci
Poveznice
Vrsta poveznice
Zadatak
is blocked by
SC-28(03) Cryptographic Keys – Assessment Procedure
is blocked by
Cryptographic Key Management
NIST
-
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final