CRY-09 Secure Key Provisioning

The cloud service provider has documented and implemented procedures and technical safeguards to ensure that cryptographic keys are provisioned and activated securely within its area of responsibility. These procedures include the verification of identity and authorisation before provisioning and activating keys to ensure they are granted to legitimate entities.

Provisioned keys include activation and deactivation dates to ensure that their use is time limited.