Navigate

CCI-004911

CCI-004911 Definition

Defines the safeguards for providing protected storage for cryptographic keys.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if protected storage for cryptographic keys is provided using [SC-28(03)_ODP[01]; one of the following PARAMETER VALUES is selected: {[SC-28(03)_ODP[02]; safeguards for protecting the storage of cryptographic keys are defined (if selected)]; hardware-protected key store}].

Validation Procedures

Examine: [SELECT FROM: System and communications protection policy; procedures addressing the protection of information at rest; system design documentation; system configuration settings and associated documentation; cryptographic mechanisms and associated configuration documentation; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: System/network administrators; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Mechanisms supporting and/or implementing hardware-based key store protection].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-004911.

Control	Description
SC-28(3)	Provide protected storage for cryptographic keys [one of "{{ insert: param, sc-28.03_odp.02 }} "/"hardware-protected key store"].