Overview

Security Requirements for 03.13.10 Key Management

Cryptographic key management and establishment can be performed using manual procedures or mechanisms supported by manual procedures. Organizations define key management requirements in accordance with applicable federal laws, Executive Orders, policies, directives, regulations, and standards specifying appropriate options, levels, and parameters.[SP 800-56A] and [SP 800-57-1] provide guidance on cryptographic key management and key establishment.

Evidence

  1. 03.13.10.a

    Cryptographic keys are established whenever cryptography is employed

  1. 03.13.10.b

    Cryptographic keys are managed whenever cryptography is employed