simpl.
로그인
사이버보안 GRC 14개 항목

Encryption & Cryptographic Key Management Audit

이 체크리스트는 영어로 제공됩니다.

Audits cryptographic controls and the key management lifecycle covering algorithms, key generation, storage, rotation, and destruction.

NIST 800-53ISO 27001:2022PCI DSS 4.0

무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.

Cryptographic Policy & Standards

  • Is a documented cryptography and key management policy established? *
  • Are only approved, strong algorithms used (e.g., AES-256, RSA-2048+, TLS 1.2+)? *
  • Are deprecated protocols and ciphers (SSL, early TLS, MD5, SHA-1) disabled? *

Data Protection

  • Is sensitive data encrypted at rest with approved algorithms? *
  • Is data encrypted in transit over untrusted networks? *
  • Is PAN rendered unreadable using strong cryptography where stored? *

Key Lifecycle Management

  • Are keys generated using a secure, approved random number generator? *
  • Are cryptographic keys stored in a hardware security module (HSM) or dedicated KMS? *
  • Are keys rotated on a defined cryptoperiod? *
  • Is access to keys restricted to the fewest custodians necessary? *

Key Rotation & Destruction

  • Is there a documented procedure for retiring, replacing, or revoking compromised keys? *
  • Are retired or expired keys securely destroyed? *
  • Do key custodians formally acknowledge their key-handling responsibilities? *
  • When were production data-encryption keys last rotated?

Encryption & Cryptographic Key Management Audit 체크리스트 전체 다운로드

인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.