Cryptographic Key Management
What is Cryptographic Key Management?
The administration of cryptographic keys throughout their lifecycle including generation, distribution, storage, rotation, revocation, and destruction.
Terms that appear alongside cryptographic key management
Each of these is named in at least one of the same controls as cryptographic key management. The number is how many controls name both.
- key management 11 shared controls
- encryption 4 shared controls
- audit 4 shared controls
- iso 27001 3 shared controls
- nist 3 shared controls
- authentication 3 shared controls
- authorization 3 shared controls
- consent 3 shared controls
Frameworks that govern cryptographic key management
What the standards actually require on cryptographic key management
Requirements naming cryptographic key management across 6 standards, quoted from the control text.
The key management part of the cryptographic policy must govern keys across their whole lifecycle: generation, renewal, storage, backup, archiving, retrieval, transmission, retirement, revocation and destruction.
dora-rts-on-ict-risk-management-framework-commission-delegated-regulation-eu-2024-1774::7 · Article 7: Cryptographic key management →Cryptographic key management processes, and supporting cryptographic key management procedures, are developed, implemented and maintained.
ISM-0507 · Cryptographic key management processes →Key management policy, standards and procedures should cover generation, distribution, installation, renewal, revocation, recovery and expiry.
monetary-authority-of-singapore-technology-risk-management-guidelines::10.2 · 10.2 Cryptographic Key Management →Secure procedures govern key generation, use, storage, distribution and destruction, and keys are stored in a separate secure place.
south-korea-cloud-security-assurance-program-csap::12.3.2 · Cryptographic key management →Procedures cover generation, use, storage, distribution, change, recovery and destruction of keys; keys are stored in a separate secure place for recovery and access to keys is minimised.
south-korea-isms-p::2.7.2 · Cryptographic key management →Document and implement an enterprise cryptographic key management standard covering the key lifecycle, with keys generated, distributed and stored in a secured key vault service and rotated on a defined schedule.
ASBv3-DP-6 · Use a secure key management process →Questions people ask about cryptographic key management
What is Cryptographic Key Management?
Why is Cryptographic Key Management important for compliance?
Which compliance frameworks address Cryptographic Key Management?
Where can I learn more about Cryptographic Key Management?
See how Cryptographic Key Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.