Cryptography policy
Course: AP® Cybersecurity Shows up in: Unit 5: Securing Applications and Data
A managerial control describing an organization's acceptable encryption protocols and key parameters: approved algorithms, key lengths, key generation and key storage.
Appears in the course and exam description (CED): 5.2.B.1
Why it matters in Unit 5
It decides which algorithms and key lengths staff may use.
Example
Only Advanced Encryption Standard (AES) 256-bit keys for files with health records.
Learn it properly, with a checkpoint 5.2 Protecting Applications and Data: Managerial Controls and Access Controls