SC-12 Cryptographic Key Establishment and Management

Control statement

Establish and manage cryptographic keys when cryptography is employed within the system in accordance with the following key management requirements: {{ insert: param, sc-12_odp }}.
        Guidance: See references in NIST 800-53 documentation.
        Guidance: Must meet applicable Federal Cryptographic Requirements. See References Section of control.
        Guidance: Wildcard certificates may be used internally within the system, but are not permitted for external customer access to the system.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators