Control Strategy DistinctProcessAccessKeys

URI: CSG-DistinctProcessAccessKeys

Package: DataLifecycle

< prev | next >

Description: Processes Service and Client share data Data in encrypted form, but use keys to encrypt or decrypt between transfer and processing, implying a need for the keys used with Data to also be shared.

Triggers Threats (3)

DF.A.CSDF-VdDA2.6

Inconsistent encryption of Data flowing from Service to Client: processes Client and Service exchange data Data in encrypted form but uses a key to encrypt or decrypt between transfer and processing, so they need a secure way to also share the cryptographic key used.

P.A.PcPuDS-V.6

Process Client cannot access input Data from Service due to inconsistent encryption: processes Client and Service both access a copy of Data stored in encrypted form, so they need a secure way to also share the cryptographic keys used.

P.T.PcPr-uDS-V.6

Process Client cannot access updates of Data from Service due to inconsistent encryption: processes Client and Service both access a copy of Data stored in encrypted form, so they need a secure way to also share the cryptographic keys used.