NIST 800-53 rev.5/System and Communications Protection/798 of 1011
SC-12Cryptographic Key Establishment and Management
Control family: System and Communications Protection
Control description
Establish and manage cryptographic keys when cryptography is employed within the system in accordance with the following key management requirements: [Assignment: organization-defined requirements for key generation, distribution, storage, access, and destruction].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.