SC-12.1 ยท Availability

Control Description

Maintain availability of information in the event of the loss of cryptographic keys by users.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Enhancement
Control Statement
The control requirements

Maintain availability of information in the event of the loss of cryptographic keys by users.

Supplemental Guidance

Escrowing of encryption keys is a common practice for ensuring availability in the event of key loss. A forgotten passphrase is an example of losing a cryptographic key.