8.24
Use of Cryptography
Define and implement rules for the efficient use of cryptography, including cryptographic key management.
-
5.6.2.5 Organizations should consider the use of encrypted backups with securely stored and recoverable key material. Decryption keys and/or unencrypted backups should be stored securely and should be
accessible only to authorized employees or officers.6.4.3.1 (b) Organizations using portable media shall:
a. Have strong asset controls for these devices;
b. Require the use of encryption on all of these devices; and
c. Have processes for the sanitization or destruction of portable media prior to disposal.