CM-3.6: Cryptography Management

controls provided by cryptographic mechanisms that are to be under configuration management are defined;