QS0017-02: Encryption Key Management Policy

Question 1

QS0017-01: Encryption Key Management Policy

What is an example of software that could be used to generate keys for software integrations or for SSH logins?

Answer 1

PuTTy has a product called PuTTyGen that may be used

Question 2

QS0017-01: Encryption Key Management Policy

Can encryption processes be used without approval by DevOps?

Answer 2

Encryption processes must not be used unless DevOps approve the procedures.

Question 3

QS0017-01: Encryption Key Management Policy

Keys used to protect production data-at-rest should be stored in two secure locations. What are the locations?

Answer 3

AWS and LastPass

Question 4

QS0017-01: Encryption Key Management Policy

How often must the keys used for encrypting data be changed?

Answer 4

At least annually; preferably automatically

Question 5

QS0017-01: Encryption Key Management Policy

When must a Digital certificate expire?

Answer 5

After a maximum of 12 months.