NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements 3.6.1: Procedures are defined and implemented to protect cryptographic keys used to protect stored account data against disclosure and misuse that include: • Access to keys is restricted to the fewest number of custodians necessary.

Procedures are defined and implemented to protect cryptographic keys used to protect stored account data against disclosure and misuse that include: • Access to keys is restricted to the fewest number of custodians necessary.

Other controls in Incident Response and Media Protection

3.15 Planning
3.16 System and Services Acquisition
3.17 Supply Chain Risk Management
3.5 Securely Dispose of Data
3.6 Encrypt Data on End-User Devices

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements controls