Key Management
What is Key Management?
The administration of cryptographic keys in a cryptosystem, including generation, exchange, storage, use, destruction, and replacement of keys. Proper key management is essential for maintaining the security of encrypted data.
Terms that appear alongside key management
Each of these is named in at least one of the same controls as key management. The number is how many controls name both.
- encryption 55 shared controls
- nist 23 shared controls
- audit 21 shared controls
- policy 17 shared controls
- cryptographic key 15 shared controls
- tls 15 shared controls
- authentication 14 shared controls
- encryption at rest 13 shared controls
Frameworks that govern key management
What the standards actually require on key management
Requirements naming key management across 6 standards, quoted from the control text.
Give cloud customers the means to manage the encryption keys that protect their own data.
CCM-CEK-08 · CSC Key Management Capability →If disk-level or partition-level encryption is used, cryptographic keys are managed in accordance with Requirements 3.6 and 3.7.
3.5.1.3 · Disk-level encryption key management →Document and implement an enterprise cryptographic key management standard covering the key lifecycle, with keys generated, distributed and stored in a secured key vault service and rotated on a defined schedule.
ASBv3-DP-6 · Use a secure key management process →Maintain and issue encryption and key management policies that mandate state-of-the-art algorithms and network protocols, tie encryption strength to the information classification scheme, cover the full key lifecycle, and reflect applicable legal obligations.
C5-CRY-01 · Policy for the use of encryption procedures and key management →Cryptographic standards approve algorithms and key strengths with centralized key management, rotation, and HSM use for sensitive keys.
IS-IV.F.1 · Encryption Standards and Key Management →Manage cryptographic keys and certificates across their lifecycle for power system applications.
IEC62351-9 · Cybersecurity Key Management →Questions people ask about key management
What is Key Management?
Why is Key Management important for compliance?
Which compliance frameworks address Key Management?
Where can I learn more about Key Management?
See how Key Management applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.