SC-12(1)
SC-12(1): Availability
Maintain availability of information in the event of the loss of cryptographic keys by users.
Supplemental
Escrowing of encryption keys is a common practice for ensuring availability in the event of key loss. A forgotten passphrase is an example of losing a cryptographic key.
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | unknown |
| Availability | high |
| Overlays |
|---|
| DAF Baseline |
| CSF Categories |
|---|
| None |