CRY-09.3: Cryptographic Key Loss or Change

CRY-09.3 · Cryptographic Key Loss or Change

Control Description

Mechanisms exist to ensure the availability of information in the event of the loss of cryptographic keys by individual users.

Control Question

Assessment question for control validation

Does the organization ensure the availability of information in the event of the loss of cryptographic keys by individual users?

Control Weighting

Validation Cadence

Annual

NIST CSF Function

Protect

Supply Chain Risk Management (SCRM) Tiers

Applicable SCRM tier levels for this control

Tier 1 - Strategic

Tier 2 - Operational

Tier 3 - Tactical

Core Control Designations

Special designations and baseline inclusions

ESP Level 2: CRY-09.3

ESP Level 3: CRY-09.3