New Zealand Information Security Manual (NZISM) 17.1.52.C.01: 17.1.52.C.01 Data recovery capability in cryptographic products (classified systems)

For CONFIDENTIAL, SECRET and TOP SECRET systems, cryptographic products must include a way to recover data if the encryption key becomes unavailable through loss, damage or failure.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter 17: Cryptography – New Zealand Information Security Manual (NZISM)

17.1.51.C.01 17.1.51.C.01 Cryptographic products must hold a GCSB-recognised evaluation
17.1.52.C.02 17.1.52.C.02 Data recovery capability in cryptographic products
17.1.53.C.01 17.1.53.C.01 Encryption for reduced handling needs uses approved algorithms
17.1.53.C.02 17.1.53.C.02 HACE required to reduce handling of classified media
17.1.53.C.03 17.1.53.C.03 Full or partial disk encryption for classified equipment
17.1.53.C.04 17.1.53.C.04 Full or partial disk encryption for reduced handling
17.1.54.C.01 17.1.54.C.01 Approved algorithm to protect NZEO data at rest
17.1.55.C.01 17.1.55.C.01 HACE for classified data over insecure networks

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All New Zealand Information Security Manual (NZISM) controls