+Policy for the use of encryption procedures and key management

Policy for the use of encryption procedures and key management

Policies and instructions with technical and organisational safeguards for encryption procedures and key management are documented, communicated and provided according to SP-01, in which the following aspects are described:
• Usage of strong encryption procedures and secure network protocols that correspond to the stateofthe-art;
• Riskbased provisions for the use of encryption which are aligned with the information classification schemes (cf. AM06) and consider the communication channel, type, strength and quality of the encryption;
• Requirements for the secure generation, storage, archiving, retrieval, distribution, withdrawal and deletion of the keys; and
• Consideration of relevant legal and regulatory obligations and requirements.
Additonal Criteria-
Supplementary Information - About the CriteriaThe stateofthe-art of strong encryption procedures and secure network protocols is specified in the following BSI Technical Guidelines valid at the given time:
• BSI TR021021 Cryptographic Mechanisms: Recommendations and Key Lengths;
• BSI TR021022 Cryptographic Mechanisms: Use of Transport Layer Security (TLS);
• BSI TR021023 Cryptographic Mechanisms: Use of Internet Protocol Security (IPSec) and Internet Key Exchange (IKEv2); and
• BSI TR021024 Cryptographic Mechanisms: Use of Secure Shell (SSH).

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje