CRY-09—Key Store Review
>Control Description
Management reviews and authorizes key store locations.
Theme
Process
Type
Detective
Policy/Standard
Key Management Policy>Implementation Guidance
1. Establish a process to review key management services to ensure that they are still authorized key stores. 2. The list of authorized key stores shall be reviewed periodically.
>Testing Procedure
1. Inspect and review key management services to ensure that they are still authorized key stores. 2. Review the list of authorized key stores and their last date of review.
>Audit Artifacts
E-CRY-18
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.