SC-12(1): Availability

Control Family:

System And Communications Protection

Parent Control:

SC-12: Cryptographic Key Establishment And Management

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

Threats Addressed:

Denial of Service

Baselines:

High

Next Version:

NIST Special Publication 800-53 Revision 5:
SC-12(1): Availability

Control Statement

The organization maintains availability of information in the event of the loss of cryptographic keys by users.

Supplemental Guidance

Escrowing of encryption keys is a common practice for ensuring availability in the event of loss of keys (e.g., due to forgotten passphrase).