+CRY-14.01B

CRY-14.01B

The cloud service provider has documented and implemented procedures to deactivate cryptographic keys. These procedures ensure that:

1. Expired keys are no longer used for encryption purposes, but may still be used for decryption if necessary;

2. Expired keys are no longer used for signature creation, but may still be used for signature verification;

3. Deactivated keys are eventually destroyed when they are no longer required, with relevant metadata retained for auditing; and

4. All actions related to key deactivation and destruction are recorded in the key management system to maintain a detailed audit log.

1. Apžvalga

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai

3. Susiję teisės aktai

Teisės aktai

Susietos užduotys

Saitai
is blocked by Content of Event Logs
is blocked by Cryptographic Key Management
is blocked by Digital & Non-Digital Media Disposal