SI-7(6)

Cryptographic Protection

System and Information Integrity (SI)

Baselines

Low · Not includedModerate · Not includedHigh · Not included

Description

Implement cryptographic mechanisms to detect unauthorized changes to software, firmware, and information.

Discussion

Cryptographic mechanisms used to protect integrity include digital signatures and the computation and application of signed hashes using asymmetric cryptography, protecting the confidentiality of the key used to generate the hash, and using the public key to verify the hash information. Organizations that employ cryptographic mechanisms also consider cryptographic key management solutions.

Implementation guidance

No content available.

CSF 2.0 crosswalk

No CSF mappings exist for this control.