💼 CC6.1-11 Protects Encryption Keys

Description

Processes are in place to protect encryption keys during generation, storage, use, and destruction.

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policy	Logic Count	Flags	Compliance
🛡️ AWS KMS Symmetric CMK Rotation is not enabled🟢	1	🟢 x6	no data
🛡️ Azure Diagnostic Setting Logs export to Storage Account not encrypted with Customer-managed key🟢	1	🟢 x6	no data
🛡️ Azure Key Vault Soft Delete and Purge Protection functions are not enabled🟢	1	🟢 x6	no data
🛡️ Azure Non-RBAC Key Vault stores Keys without expiration date🟢	1	🟢 x6	no data
🛡️ Azure Non-RBAC Key Vault stores Secrets without expiration date🟢	1	🟢 x6	no data
🛡️ Azure RBAC Key Vault stores Keys without expiration date🟢	1	🟢 x6	no data
🛡️ Azure RBAC Key Vault stores Secrets without expiration date🟢	1	🟢 x6	no data
🛡️ Azure Storage Account With Critical Data is not encrypted with customer managed key🟢⚪		🟢 x2, ⚪ x1	no data
🛡️ Google GCE Instance Block Project-Wide SSH Keys is not enabled🟢	1	🟢 x6	no data