UK Defence Standard 05-138 - Cyber Security for Defence Suppliers DEFSTAN-CRYPTO: Cryptography and Key Management

Cryptographic protection of MOD Identifiable Information at rest and in transit must use approved algorithms with strong key management aligned to MOD guidance.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Technical Controls

DEFSTAN-ACCESS Access Control and Identity Management
DEFSTAN-CONFIG Secure Configuration and Hardening
DEFSTAN-DEV Secure Development and System Acquisition
DEFSTAN-MALWARE Malware Protection
DEFSTAN-MONITOR Security Monitoring and Logging
DEFSTAN-PATCH Patch and Vulnerability Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All UK Defence Standard 05-138 - Cyber Security for Defence Suppliers controls