Saudi NCA National Cryptographic Standards (NCS-1:2020)
Section 6: key lifecycle management – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Saudi NCA National Cryptographic Standards (NCS-1:2020) 6.2c: Key revocation, validation, archive, destruction and accounting

What does 6.2c require?

Distributed systems must implement current CRLs and OCSP so that expired or revoked keys are not relied on, and key validation must check CRL or OCSP servers. Archived keys must be kept confidential to protect data encrypted under them, expired keys must be archived where old encrypted data must remain accessible, and archives must respect regulatory retention periods. Keys that are no longer needed must be removed from hardware by secure deletion, and media that held keys must be sanitised before disposal in line with NIST SP 800-88r1 or the NSA/CSS storage device sanitisation manual. All asymmetric keys and their use must be accounted for and monitored.

Maintained by Gerard Blokdyk

Other controls in Section 6: key lifecycle management – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Saudi NCA National Cryptographic Standards (NCS-1:2020) controls