CRY

Cryptographic Protections

27 controls

Use appropriate cryptographic mechanisms and industry-recognized key management practices to protect sensitive and regulated data at rest and in transit.

SCF #	Control Name	Weight	NIST CSF	Frameworks
CRY-01	Cryptographic Protections Policy	10 — Critical	Govern	2
CRY-02	Use of Cryptographic Controls	10 — Critical	Govern	119
CRY-03	Cryptographic Management	5 — Medium	Protect	9
CRY-03.1	Alternate Physical Protection	5 — Medium	Protect	27
CRY-03.2	Pre/Post Transmission Handling	5 — Medium	Protect	6
CRY-04	Cryptographic Cipher Suites and Protocols Inventory	9 — Critical	Protect	14
CRY-05	Encrypting Data In Transit	10 — Critical	Protect	105
CRY-06	Integrity of Data In Transit	10 — Critical	Protect	62
CRY-07	Encrypting Data At Rest	10 — Critical	Protect	97
CRY-07.1	Encrypting Storage Media	8 — High	Protect	16
CRY-07.2	Encrypting Offline Storage	5 — Medium	Protect	3
CRY-08	Database Encryption	8 — High	Protect	4
CRY-09	Public Key Infrastructure (PKI)	9 — Critical	Protect	45
CRY-09.1	Public Key Infrastructure (PKI) Availability	9 — Critical	Recover	10
CRY-10	Cryptographic Key Management	10 — Critical	Protect	49
CRY-10.1	Symmetric Keys	9 — Critical	Protect	9
CRY-10.2	Asymmetric Keys	9 — Critical	Protect	7
CRY-10.3	Cryptographic Key Loss or Change	8 — High	Protect	31
CRY-10.4	Control & Distribution of Cryptographic Keys	9 — Critical	Protect	18
CRY-10.5	Assigned Cryptographic Key Owners	8 — High	Protect	1
CRY-10.6	Third-Party Cryptographic Keys	7 — High	Protect	5
CRY-10.7	External System Cryptographic Key Control	5 — Medium	Protect	6
CRY-11	Transmission of Cybersecurity & Data Protection Attributes	5 — Medium	Protect	6
CRY-12	Certificate Authorities	8 — High	Protect	8
CRY-13	Certificate Monitoring	5 — Medium	Protect	4
CRY-14	Cryptographic Hash	5 — Medium	Protect	3
CRY-15	Export-Controlled Cryptography	5 — Medium	Protect	29

The Secure Controls Framework (SCF) is maintained by SCF Council. Use of SCF content is subject to the SCF Terms & Conditions.

Cryptographic Protections

Manage SCF Controls in SCF Connect