https://wiki.idesg.org/index.php?action=history&feed=atom&title=Secure_Req_11 2026-05-01T11:15:08Z Revision history for this page on the wiki MediaWiki 1.38.4 https://wiki.idesg.org/index.php?title=Secure_Req_11&diff=6564&oldid=prev 2018-06-28T04:03:33Z

<p>7 revisions imported: Initial Upload of old pages from IDESG Wiki</p> <p><b>New page</b></p><div>&#039;&#039;&lt;&lt; Back to [[Baseline_Functional_Requirements_v1.0|Baseline Functional Requirements Index]]&#039;&#039;<br /> <br /> == SECURE-11. KEY MANAGEMENT ==<br /> Entities that use cryptographic solutions as part of identity management MUST implement key management policies and processes that are consistent with industry-accepted practices.<br /> <br /> === SUPPLEMENTAL GUIDANCE ===<br /> To support the security and interoperability of cryptographic solutions, organizations must follow<br /> best practices and standards for cryptographic algorithms and key management including the<br /> generation, protection, distribution, and recovery of keys.<br /> <br /> === REFERENCES ===<br /> NIST 800-57 (3-parts – Key Management– http://dx.doi.org/10.6028/NIST.SP.800-57pt3r1,<br /> http://csrc.nist.gov/publications/nistpubs/800-57/SP800-57-Part2.pdf,<br /> http://dx.doi.org/10.6028/NIST.SP.800-57pt3r1; , ISO/IEC 27002 - 12.3.1; PCI-DSS- 3.6.1-3.6.8 ; (see<br /> table of requirements at page 18+); FFIEC - Information Security<br /> http://ithandbook.ffiec.gov/ITBooklets/FFIEC_ITBooklet_InformationSecurity.pdf, see 5.1.2.3(a), 5.3,<br /> 5.3.2, 2.1.2, 2.11; Wholesale Payment Systems Booklet,<br /> http://ithandbook.ffiec.gov/ITBooklets/FFIEC_ITBooklet_WholesalePaymentSystems.pdf<br /> <br /> === APPLIES TO ACTIVITIES ===<br /> [[IDEF Functional Model REGISTRATION|REGISTRATION]], <br /> [[IDEF Functional Model CREDENTIALING|CREDENTIALING]], <br /> [[IDEF Functional Model AUTHENTICATION|AUTHENTICATION]], <br /> [[IDEF Functional Model AUTHORIZATION|AUTHORIZATION]], <br /> [[IDEF Functional Model INTERMEDIATION|INTERMEDIATION]]<br /> <br /> === KEYWORDS ===<br /> [[IDEF Keywords PKI|PKI]], [[IDEF Keywords POLICIES|POLICIES]], [[IDEF Keywords SECURITY|SECURITY]]<br /> <br /> ----<br /> ----<br /> Quick Links: [[SALS]] | [[Baseline Functional Requirements v1.0]] | [[Glossary]] |<br /> <br /> ----<br /> ----</div>

Omaerz