+SC-28(03) Cryptographic Keys

SC-28(03) Cryptographic Keys

Control

Provide protected storage for cryptographic keys [Selection: {{ insert: param, sc-28.03_odp.02 }} ; hardware-protected key store].

Discussion

A Trusted Platform Module (TPM) is an example of a hardware-protected data store that can be used to protect cryptographic keys.

Assessment Objective

protected storage for cryptographic keys is provided using [Selection: {{ insert: param, sc-28.03_odp.02 }} ; hardware-protected key store].

Assessment Method

Examine

System and communications protection policy procedures addressing the protection of information at rest system design documentation system configuration settings and associated documentation cryptographic mechanisms and associated configuration documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
is blocked by SC-28(03) Cryptographic Keys – Assessment Procedure
is blocked by Cryptographic Key Management