Cloud Cybersecurity Controls – Tenants (CCC – 2 : 2024) Key Management

Ensures secure management of cryptographic keys to protect the confidentiality, integrity, and availability of information and technical assets.

2-15-T-1

Cybersecurity requirements for key management within the CST shall be identified, documented, and approved.
2-15-T-2

Cybersecurity requirements for key management within the CST shall applied.
2-15-T-3

In addition to the ECC Subcontrol 2-8-3-2, cybersecurity requirements for key management within the CST shall cover, at minimum, the following:
2-15-T-4

Cybersecurity requirements for key management within the CST shall be applied and reviewed periodically.

Need help putting this into practice? See our NCA CCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.