+CRY-14.01B

CRY-14.01B

The cloud service provider has documented and implemented procedures to deactivate cryptographic keys. These procedures ensure that:

1. Expired keys are no longer used for encryption purposes, but may still be used for decryption if necessary;

2. Expired keys are no longer used for signature creation, but may still be used for signature verification;

3. Deactivated keys are eventually destroyed when they are no longer required, with relevant metadata retained for auditing; and

4. All actions related to key deactivation and destruction are recorded in the key management system to maintain a detailed audit log.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
is blocked by Content of Event Logs
is blocked by Cryptographic Key Management
is blocked by Digital & Non-Digital Media Disposal