Key Management
What is Key Management?
The administration of cryptographic keys in a cryptosystem, including generation, exchange, storage, use, destruction, and replacement of keys. Proper key management is essential for maintaining the security of encrypted data.
Terms that appear alongside key management
Each of these is named in at least one of the same controls as key management. The number is how many controls name both.
- encryption 55 shared controls
- nist 23 shared controls
- audit 21 shared controls
- policy 17 shared controls
- cryptographic key 15 shared controls
- tls 15 shared controls
- authentication 14 shared controls
- encryption at rest 13 shared controls
Frameworks that govern key management
What the standards actually require on key management
Requirements naming key management across 6 standards, quoted from the control text.
Give cloud customers the means to manage the encryption keys that protect their own data.
CCM-CEK-08 · CSC Key Management Capability →Session and group keys are established by Diffie-Hellman agreement, derived through key derivation functions, and for multicast protocols distributed through group key management.
iec-62351-power-systems-communication-security::9:5.6 · Part 9, 5.6: key agreement (Diffie-Hellman, key derivation functions, group key management) →The SecPlan for the wireless network should record the procedures for generating, distributing and rekeying keys.
new-zealand-information-security-manual-nzism::18.2.28.C.01 · 18.2.28.C.01 Document wireless key management in the SecPlan →The entity keeps, and follows, policies and procedures for managing its cryptographic processes and keys. The assessor examines them and interviews personnel.
pci-3ds-core-security-standard::P2-6.1.1 · P2-6.1.1 Cryptography and key-management policies and procedures →A service provider gives its service customers the ability to control and administer the keys that encrypt their data.
cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::CEK-08 · Service Customer Key Management Capability →Key management. Level 1 (a to d): key management governed by the cryptography policy; key change procedures; and formal acknowledgement by key custodians of their responsibilities.
mtcs-singapore::17.4 · Key management →Questions people ask about key management
What is Key Management?
Why is Key Management important for compliance?
Which compliance frameworks address Key Management?
Where can I learn more about Key Management?
See how Key Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.