IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
S 2.166 Provisions governing the use of crypto
modules
Initiation responsibility: IT Security Management
Implementation responsibility: IT Security Management
A range of security requirements on the use of crypto modules also has to be
imposed in the course of ongoing operation. These must be appropriately
integrated into the technical and organisational environment in which they are
used.
To achieve this, certain organisational regulations have to be put in place:
- Certain members of staff must be nominated as having responsibility for
drawing up the cryptographic concept, for selecting the cryptographic
products and for ensuring their reliable operation.
- Suitable personnel measures must be specified and implemented (training,
user support, deputisation arrangements, obligations, apportioning of
functions).
- Users should not only be trained in how to handle the crypto modules that
they are to operate, they should also be made aware of the benefit and the
necessity of the cryptographic procedures and be given an overview of
basic cryptographic terms (see also S 3.23).
- There must be a clear definition of what needs to be done if problems occur
in the use of crypto modules, or if there is even a suspicion of a security
incident. All users must be informed of the relevant procedures and
reporting channels.
- Within the framework of the cryptographic concept it must be established
who is obliged or allowed to use which crypto products when, and what
marginal conditions need to be observed (e.g. key escrow).
- There should be regular checks that the crypto modules are being used
correctly. It should also be regularly examined whether the cryptographic
procedures in use still represent the state of the art (for further details see
also S 2.35 Obtaining information on security weaknesses of the system).
- Replacement crypto modules should be held in reserve in accordance with
the defined availability requirements, in order to guarantee smooth
operation. This is important in particular where access to encrypted data is
dependent on the functional capability of an individual crypto module, for
example in the case of data archiving or ISDN encryption.
Reliable, secure operation of the crypto modules must be ensured; this
includes:
- Before they are put into operation, the optimum configuration of the crypto
modules must be determined, for example regarding key lengths, operating
modes or crypto algorithms.
- Once defined, the configuration must be documented so that it can be set
up again quickly after a system failure of if reinstallation becomes
necessary.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000