Netherlands Baseline Information Security for Government 2 (BIO2) 8.24.01: Cryptography policy with the required topics

What does 8.24.01 require?

The cryptography policy addresses at least these points: the situations in which cryptography is used; who answers for implementation; who answers for key management; the way the cryptography in use, and where it is used, gets recorded; the standards it rests on and the way the Netherlands Standardisation Forum's standards are applied; the way the protection level is established; and, for communication between entities, that the policy is settled jointly.