💼 SC-12 CRYPTOGRAPHIC KEY ESTABLISHMENT AND MANAGEMENT

• Contextual name: 💼 SC-12 CRYPTOGRAPHIC KEY ESTABLISHMENT AND MANAGEMENT
• ID: /frameworks/nist-sp-800-53-r4/sc/12
• Located in: 💼 SC SYSTEM AND COMMUNICATIONS PROTECTION

Description

The organization establishes and manages cryptographic keys for required cryptography employed within the information system in accordance with [Assignment: organization-defined requirements for key generation, distribution, storage, access, and destruction].

Similar

• Internal
  • ID: dec-c-2411c0ba

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST CSF v1.1 → 💼 PR.DS-1: Data-at-rest is protected		15	19
💼 NIST CSF v1.1 → 💼 PR.DS-2: Data-in-transit is protected		14	21

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 SC-12 (1) AVAILABILITY
💼 SC-12 (2) SYMMETRIC KEYS		1	1
💼 SC-12 (3) ASYMMETRIC KEYS		1	1
💼 SC-12 (4) PKI CERTIFICATES
💼 SC-12 (5) PKI CERTIFICATES _ HARDWARE TOKENS

Policies (4)

Policy	Logic Count	Flags
📝 AWS Account Root User has active access keys 🟢	1	🟢 x6
📝 AWS IAM User Access Keys are not rotated every 90 days or less 🟢	1	🟢 x6
📝 AWS IAM User has more than one active access key 🟢	1	🟢 x6
📝 AWS IAM User with console and programmatic access set during the initial creation 🟢		🟢 x3

Internal Rules

Rule	Policies	Flags
✉️ dec-x-0a7801fb	1
✉️ dec-x-30795016	1
✉️ dec-x-b10e98af	1
✉️ dec-x-bcb0c78f	1