Skip to main content

CCC.KeyMgmt.CN04: Validate Imported Keys

Control ID:CCC.KeyMgmt.CN04
Title:Validate Imported Keys
Objective:Accept only externally generated keys that meet approved cryptographic strength and provenance requirements.
Control Family:
Key Lifecycle Management

Related Threats

IDTitleDescriptionExternal MappingsCapability MappingsControl Mappings
CCC.KeyMgmt.TH04Introduction of Weak or Compromised Key Material During ImportInsufficient validation during the key-import process may allow weak, back-doored, or otherwise compromised key material to be introduced, reducing the overall strength of subsequent cryptographic operations.
1
1
0

Related Capabilities

IDTitleDescription
CCC.KeyMgmt.CP22Key ImportSupports the ability to import externally generated keys into the KMS.

Guideline Mappings

Reference IDEntry IDStrengthRemarks
NIST-CSF
PR.DS-1
0
Data at rest is protected
NIST_800_53
SC-28
0
Protection of Information at Rest

Assessment Requirements

IDDescriptionApplicability
CCC.KeyMgmt.CN04.AR01When a key import request is processed, the key MUST use an approved algorithm (RSA-2048+, EC-P256+) and originate from a certified HSM.
tlp-green