cry-01-useofcryptographiccontrols.md

SCF - CRY-01 - Use of Cryptographic Controls

Mechanisms exist to facilitate the implementation of cryptographic protections controls using known public standards and trusted cryptographic technologies.

Mapped framework controls

GDPR

• Art 32.1
• Art 32.2
• Art 5.1

ISO 27002

• A.8.24
• A.8.26

NIST 800-53

• SC-13
• SC-8(1)

SOC 2

• CC6.1

Control questions

Does the organization facilitate the implementation of cryptographic protections controls using known public standards and trusted cryptographic technologies?