References: NIST Special Publications 800-56, 800-57. Priority and Baseline Allocation: P1 LOW SC-12 MOD SC-12 (2) (5) HIGH SC-12 (1) (2) (5) SC-13 USE OF CRYPTOGRAPHY Applicability: All Information Systems Control: The information system implements required cryptographic protections using cryptographic modules that comply with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. Supplemental Guidance: None. Control Enhancements: The organization employs, at a minimum, FIPS-validated cryptography to protect unclassified information. References: FIPS Publication 140-2; Web: CSRC.NIST.GOV/CRYPTVAL, . Priority and Baseline Allocation: P1 LOW SC-13 (1) MOD SC-13 (1) HIGH SC-13 (1) SC-14 PUBLIC ACCESS PROTECTIONS Applicability: All Information Systems Control: The information system protects the integrity and availability of publicly available information and applications. Supplemental Guidance: The purpose of this control is to ensure that organizations explicitly address the protection needs for public information and applications with such protection likely being implemented as part of other security controls. Control Enhancements: None. References: None. Priority and Baseline Allocation: P1 LOW SC-14 MOD SC-14 HIGH SC-14
References: NIST Special Publications 800-56, 800-57. Priority and Baseline Allocation: P1 LOW SC-12 MOD SC-12 (2) (5) HIGH SC-12 (1) (2) (5) SC-13 USE OF CRYPTOGRAPHY Applicability: All Information Systems Control: The information system implements required cryptographic protections using cryptographic modules that comply with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. Supplemental Guidance: None. Control Enhancements: The organization employs, at a minimum, FIPS-validated cryptography to protect unclassified information. References: FIPS Publication 140-2; Web: CSRC.NIST.GOV/CRYPTVAL, . Priority and Baseline Allocation: P1 LOW SC-13 (1) MOD SC-13 (1) HIGH SC-13 (1) SC-14 PUBLIC ACCESS PROTECTIONS Applicability: All Information Systems Control: The information system protects the integrity and availability of publicly available information and applications. Supplemental Guidance: The purpose of this control is to ensure that organizations explicitly address the protection needs for public information and applications with such protection likely being implemented as part of other security controls. Control Enhancements: None. References: None. Priority and Baseline Allocation: P1 LOW SC-14 MOD SC-14 HIGH SC-14