Cryptographic Controls Standard

The objective of the Cryptographic Controls Standard is to outline the minimum information security controls which must be applied when cryptographic services and solutions are utilized by the Company. Specifically, this Standard focuses on key management requirements, acceptable algorithms, appropriate key lengths, and raises pertinent regulatory considerations relating to the use of cryptography.

Cryptographic controls can be used for a number of different security objectives, in particular for the following:

a. Confidentiality: using encryption of information to protect against unauthorized access to information, either stored or transmitted;

b. Integrity/Authenticity: using message authentication codes or digital signatures to protect the authenticity and integrity of stored or transmitted information;

c. Non-repudiation: using cryptographic techniques to assist with determining proof of the occurrence or non-occurrence of an event, or

d. Authentication, e.g. certificate based authentication