EKM-01: Entitlement

Control Family:

Encryption & Key Management

CSF v1.1 References:

PR.AC-6

PF v1.0 References:

PR.AC-P6

Threats Addressed:

Control is withdrawn in the next version of this control set and incorporated into: CEK-01: Encryption and Key Management Policy and Procedures.

Control Statement

Keys must have identifiable owners (binding keys to identities) and there shall be key management policies.

[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]

Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.