Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019)
Chapter Two, Section II: protection (Articles 13 to 31) – Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019)

Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019) 16: Set policies and internal rules for cryptographic mechanisms that protect the confidentiality and integrity of sensitive information according to its classification, matched to the threats and to regulatory requirements

What does 16 require?

Within the Article 5 rule set the entity develops policies and internal rules for the cryptographic mechanisms it uses to keep sensitive information confidential and intact in line with its classification. The mechanisms chosen must correspond to how exposed the information is to threats against confidentiality and integrity and to the regulatory and compliance requirements that govern its creation, storage and transmission; Annex 1 lists the ISO/IEC key management and encryption standards the ordinance points to.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27002:2022 · 1 control

  • 8.24 Use of cryptography

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Chapter Two, Section II: protection (Articles 13 to 31) – Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019)

Query this from an agent

The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019) controls