+CRY-03.01B

CRY-03.01B

The cloud service provider ensures that encryption, authentication and key management practices are regularly audited in accordance with COM-02 and COM-03 to identify and address potential vulnerabilities. At a minimum, reviews are performed annually and immediately following security incidents involving cryptographic components.

Supplementary information

Further criteria for key management are found in criteria CRY-06, CRY-07, CRY-09 - CRY-19

1. Visão geral

1.1 Referências

1.2 Requisitos identificados

1.3 Regulamentos relacionados

2. Requisitos identificados

Requisitos

3. Regulamentos relacionados

Regulamentos

Pedidos ligados

Ligações
is blocked by Functional Review Of Security, Compliance & Resilience Controls
is blocked by Cryptographic Cipher Suites and Protocols Inventory