CRY-08
Public Key Infrastructure (PKI)
Description
Mechanisms exist to securely implement an internal Public Key Infrastructure (PKI) infrastructure or obtain PKI services from a reputable PKI service provider.
Control Question
Does the organization securely implement an internal Public Key Infrastructure (PKI) infrastructure or obtain PKI services from a reputable PKI service provider?
Control Metadata
Domain:
Cryptographic Protections
Validation Cadence:
Annual