Procedure
Cryptographic Key Operations Procedure
This procedure defines the step-by-step operational instructions for all cryptographic key operations including generation, registration, distribution, activation, rotation, revocation, and destruction. It implements the controls established in the Cryptographic Key Lifecycle Management Framework and ensures that consistent, auditable execution of key management operations is achieved.
- Type
- Procedure
- Version
- 1.10.0
- Date
- 2026-10-15
- Owner
- Chief Information Security Officer
- Approving authority
- Chief Information Officer
- Classification
- Public
- Confidentiality
- Public
- Category
- Information Security
- Review frequency
- Annual and upon material cryptographic standard or operational change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- Roles and responsibilities
- 1. Key generation
- 2. Key registration
- 3. Key distribution
- 4. Key activation
- 5. Key rotation
- 6. Key revocation
- 7. Key destruction
- 8. Key compromise response
- Framework alignment
Frameworks it maps to
- ISO/IEC 27002:2022
- NIST SP 800-57 Part 1 Rev. 5
- NIST SP 800-57 Part 2 Rev. 1
- NIST SP 800-57 Part 3 Rev. 1
- NIST FIPS 140-3
- NIST SP 800-38F
- NIST SP 800-130
- NIST SP 800-88 Rev. 2
- COBIT 2019
- CSA CCM v4.1
Related documents
- Cryptographic Key Lifecycle Management Frameworksecurity
- Post-Quantum Cryptography Readiness Roadmapsecurity
- Enterprise Governance and Risk Management Policyrisk
- Approved Key-Agreement Protocols Registersecurity
- Asset Inventory Registeroperations
Next
All Documents