CCI-001139

The organization maintains availability of information in the event of the loss of cryptographic keys by users.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to maintain availability of information in the event of the loss of cryptographic keys by users.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed maintains availability of information in the event of the loss of cryptographic keys by users.

Compelling Evidence

1.) Signed and dated System Security Plan (SSP).

The controls below (if any) were marked by NIST as being related to CCI-001139.