+CRY-11.01B

CRY-11.01B

The cloud service provider has documented and implemented procedures and technical safeguards for the secure archiving of cryptographic keys. These include:

1. Storage of archived keys in a repository to prevent unauthorised access;

2. Restriction of access to archived keys to authorised personnel based on the principle of least privilege;

3. Support of later recovery of information through archived keys;

4. Retention of archived keys only for as long as needed and secure destruction afterwards; and

5. Logging of all activities related to the storage and recovery of archived keys.

1. Pārskats

1.1 Atsauces

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

Prasības

3. Saistītie tiesību akti

Tiesību akti

Saistītie uzdevumi

Saites
is blocked by Content of Event Logs
is blocked by Cryptographic Key Management
is blocked by Cryptographic Key Loss or Change
is blocked by Digital & Non-Digital Media Disposal
is blocked by Least Privilege