+CON.1.A9 Selecting an Appropriate Cryptographic Product [IT Operation Department, Process Owner] (H)

CON.1.A9 Selecting an Appropriate Cryptographic Product [IT Operation Department, Process Owner] (H)

Before selecting a cryptographic product, an organisation SHOULD define the requirements to be met by the product. Here, aspects such as the scope of functions, interoperability, efficiency, and protection against incorrect operation and malfunction SHOULD be considered. It SHOULD be checked whether certified products should be given priority. The selection process SHOULD also consider the future deployment locations due to the export and import restrictions on cryptographic products, for example.

As a general rule, products that do not make it possible to control the storage of keys SHOULD NOT be used.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.31 Incorrect Use or Administration of Devices and Systems