3.13.10
3.13.10
Establish and manage cryptographic keys for cryptography employed in organizational systems.
-
5.6.2.5 Organizations should consider the use of encrypted backups with securely stored and recoverable key material. Decryption keys and/or unencrypted backups should be stored securely and should be
accessible only to authorized employees or officers.