Rules for the effective use of cryptography, including cryptographic key management, shall be defined and implemented.

Implementation guidance:

Sources:

• ISO/IEC 27001:2022 Annex I, 8.24