EKM-04: Storage and Access
Control Family:
CSF v1.1 References:
PF v1.0 References:
Threats Addressed:
Control is withdrawn in the next version of this control set and incorporated into: CEK-03: Data Encryption, CEK-04: Encryption Algorithm, CEK-10: Key Generation.
Control Statement
Platform and data-appropriate encryption (e.g., AES-256) in open/validated formats and standard algorithms shall be required. Keys shall not be stored in the cloud (i.e., at the cloud provider in question), but maintained by the cloud consumer or trusted key management provider. Key management and key usage shall be separated duties.
[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]
Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.