The organization establishes and manages cryptographic keys for required cryptography employed within the information system in accordance with [Assignment: organization-defined requirements for key generation, distribution, storage, access, and destruction].
SC-12_Additional_FedRAMP_Requirements_and_Guidance:__Guidance'>SC-12 Additional FedRAMP Requirements and Guidance:
Guidance: Federally approved and validated cryptography.