Title: Applications involved in the production, control, and distribution of symmetric cryptographic keys must use NIST-approved or NSA-approved key management technology and processes.
Vulnerability ID: V-32494
IA Controls: None
Description: Cryptographic key management and establishment can be performed using manual procedures or automated mechanisms with supporting manual procedures.
In addition to being required for the effective operation of a cryptographic mechanism, effective cryptographic key management provides protections to maintain the availability of the information in the event of the loss of cryptographic keys by users.
This requirement is specific to key management systems. This requirement is NA for databases.
Check Text: This check is NA for databases.
Fix Text: This fix is NA for databases.[divider]