SC-28(3)

Requirement

Provide protected storage for cryptographic keys [Selection: [Assignment: organization-defined safeguards]; hardware-protected key store].

Discussion

A Trusted Platform Module (TPM) is an example of a hardware-protected data store that can be used to protect cryptographic keys.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; procedures addressing the protection of information at rest; system design documentation; system configuration settings and associated documentation; cryptographic mechanisms and associated configuration documentation; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Mechanisms supporting and/or implementing hardware-based key store protection].

ID	Assessment Objectives
SC-28(03)	protected storage for cryptographic keys is provided using <SC-28(03)_ODP[01] SELECTED PARAMETER VALUE>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!