SC-12: Cryptographic Key Establishment and Management

cryptographic keys are established when cryptography is employed within the system in accordance with requirements ;

cryptographic keys are managed when cryptography is employed within the system in accordance with requirements .

System and communications protection policy

procedures addressing cryptographic key establishment and management

system design documentation

cryptographic mechanisms

system configuration settings and associated documentation

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

organizational personnel with responsibilities for cryptographic key establishment and/or management

Mechanisms supporting and/or implementing cryptographic key establishment and management