Keys are managed across their whole life. Components: FCS_CKM.1 Cryptographic key generation, FCS_CKM.2 Cryptographic key distribution, FCS_CKM.3 Cryptographic key access, FCS_CKM.4 Cryptographic key destruction (restructured in CC:2022), FCS_CKM.5 Cryptographic key derivation and FCS_CKM.6 Timing and event of cryptographic key destruction, each tied to named algorithms, key sizes and standards.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.