BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

9 Additional Considerations (was: Accountability, Audit, and Survivability)

NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 5 against SP 800-57 Part 1 Rev. 4
All changes in this version
modified 9 Additional Considerations

Title changed

Before · SP 800-57 Part 1 Rev. 4

Accountability, Audit, and Survivability

After · SP 800-57 Part 1 Rev. 5

Accountability, Audit, andAdditional SurvivabilityConsiderations

Control changed

Before · SP 800-57 Part 1 Rev. 4

Systems that process valuable information require controls in order to protect the information from unauthorized disclosure and modification. Cryptographic systems that contain keys and other cryptographic information are especially critical. Three useful control principles and their application to the protection of keying material are highlighted in this section.

After · SP 800-57 Part 1 Rev. 5

SystemsMany aspects of key management can be handled by a key-management system that processis valuabledesigned informationto requiremanage controlscryptographic inkeys orderand their metadata. An automated key management system may be used to protectoversee, automate, and secure the informationkey frommanagement unauthorizedprocess. disclosureHowever, when using such a system, there are additional considerations for designing and modificationoperating the system. CryptographicAmong systemsthese thatare containcontrolling keysaccess to the system by authenticating the individuals requesting access and otherverifying cryptographictheir informationauthorization areto especiallydo criticalso (see Section 9.1 Three), usefulcreating controland principlesmaintaining an inventory of keys and theircertificates applicationto monitor when a key or certificate needs to be replaced and who is responsible for key and certificate replacement (see Section 9.2 ), assigning responsibilities and monitoring system activities (see Section 9.3 ), auditing the protectionimplementation and performance of keyingthe materialsystem areand highlightedexamining inaudit thislogs sectionfor irregularities (see Section 9.4 ), and ensuring system survivability (see Section 9.5 ).