+CRY-19.01B

CRY-19.01B

The cloud service provider implements procedures and technical safeguards to ensure the secure handling of cryptographic keys managed by cloud service customers. In these procedures, the following aspects are considered:

1. Secure integration of customer-generated keys ('Bring-Your-Own-Key'; BYOK) into the cloud environment;

2. Logging of all activities related to customer-managed keys; and

3. Definition of access control mechanisms to enable that only authorised users can gain access to customer-managed keys.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
is blocked by Content of Event Logs
is blocked by Control & Distribution of Cryptographic Keys
is blocked by Third-Party Cryptographic Keys
is blocked by Access Enforcement