Cloud Cybersecurity Controls – Service Providers (CCC – 2 : 2024) Key Management

Ensures secure management of cryptographic keys to protect the confidentiality, integrity, and availability of information and technical assets.

2-15-P-1

Cybersecurity requirements for key management process within the CSP shall be identified, documented, and approved.
2-15-P-2

Cybersecurity requirements for key management process within the CSP shall be applied.
2-15-P-3

In addition to the ECC Subcontrol 2-8-3-2, cybersecurity requirements for key management within the CSP shall cover, at minimum, the following:
2-15-P-4

Cybersecurity requirements for key management within the CSP shall be applied and reviewed periodically.

Need help putting this into practice? See our NCA CCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.