19.12.2012 Views

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Safeguard Catalogue - Organisation Remarks<br />

____________________________________________________________________ .........................................<br />

If a key being used is suspected of having been disclosed, its use should be<br />

discontinued and all participants should be informed. <strong>Information</strong> already<br />

encrypted with this key should be decrypted and encrypted with a different<br />

key.<br />

Destroying keys<br />

Keys which are no longer required (for example keys whose period of validity<br />

has expired) must be deleted in a secure manner or destroyed (for example by<br />

multiple deletion/overwriting and/or mechanical destruction of the data<br />

medium). A general rule is that products with a key filing system that cannot<br />

be controlled should not be used.<br />

Additional controls:<br />

- Has responsibility for encryption management been designated?<br />

- Is the data that needs to be protected transferred separately from the<br />

encryption keys?<br />

- Are the keys in use changed frequently enough?<br />

- Are the keys stored in a secure local environment?<br />

____________________________________________________________________ .........................................<br />

<strong>IT</strong>-<strong>Baseline</strong> <strong>Protection</strong> <strong>Manual</strong>: Oktober 2000

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!