ComplianceNIST 800-53 enhancement

NIST-SC-12(1) Availability

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SC System and Communications Protection
Control
SC-12(1)

Control statement

Maintain availability of information in the event of the loss of cryptographic keys by users.

Discussion

Escrowing of encryption keys is a common practice for ensuring availability in the event of key loss. A forgotten passphrase is an example of losing a cryptographic key.

Related

Enhancement of · Compliance (1)

  • NIST-SC-12 Cryptographic Key Establishment and Management NIST 800-53 control