Algorithm and Protocol Governance
Effective algorithm and protocol governance requires establishing policies and controls that ensure cryptographic methods are securely implemented, properly maintained, and comply with organizational or regulatory standards.
2 slides · 1 min read · Domain 3
This means the requirement of policies and
Algorithm and protocol governance implementation of those policies through ensures cryptographic systems standards, procedures, and baselines.
remain trustworthy over time by
Policies, standards, and procedures relating managing updates, deprecations, to cryptography should minimally address compliance, version control, and the following: integration with emerging security
- Approved cryptographic algorithms and
standards.
key sizes
Security and other professionals must ensure governance processes are in place to support an organization's use and reliance on cryptography.
- Transition plans for weakened or compromised algorithms and keys
- Operation and maintenance procedures
- Selection criteria and a process for determining which data needs what form of encryption
- Key generation, escrow, and secure destruction
- Incident reporting surrounding the loss of keys or the compromise of cryptographic systems