Cryptography. 6.1 Leading Resolutions shall ensure that cryptographic keys and digital certificates are managed securely at all times, in accordance with documented control requirements and procedures which are consistent with Good Industry Practice. 6.2 Leading Resolutions shall ensure that if public key infrastructure (PKI) is used, it shall be protected by ‘hardening’ the underlying operating system(s) and restricting access to a Certificate Authority. 6.3 All of the Customer’s Confidential Information stored on any digital or electronic portable storage device must be encrypted with a Federal Information Processing Standards (FIPS) or National Institute for Standards and Technology (NIST) certified cipher and any associated encryption keys are managed by Leading Resolutions.
Appears in 2 contracts
Sources: Framework Agreement for the Supply of Consultancy Services, Framework Agreement for the Supply of Consultancy Services