Best Practice Detail

13-8-8745

Service Providers should define processes for key management lifecycle in cases where the cloud provider must perform key management: how keys are generated, used, stored, backed up, recovered, rotated, and deleted. Further, understand whether the same key is used for every customer or if each customer has its own key set.

Status: Rollover New

References/Comments: Cloud Security Alliance (CSA)

Historical events:

Service Providers
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Information Protection
Encryption
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII