Detections
Analytics
800-53|CM-3(6)
Title
CRYPTOGRAPHY MANAGEMENTDescription
The organization ensures that cryptographic mechanisms used to provide [Assignment: organization-defined security safeguards] are under configuration management.Supplemental
Regardless of the cryptographic means employed (e.g., public key, private key, shared secrets), organizations ensure that there are processes and procedures in place to effectively manage those means. For example, if devices use certificates as a basis for identification and authentication, there needs to be a process in place to address the expiration of those certificates.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: SC-13
Category: CONFIGURATION MANAGEMENT
Parent Title: CONFIGURATION CHANGE CONTROL
Family: CONFIGURATION MANAGEMENT
Audit Items
View all Reference Audit Items