Back to all 93 controls
Annex A 8.24
Technological
A.8.24 Use of cryptography
Use cryptography appropriately.
What good looks like
Approved algorithms/key lengths, key management lifecycle, encryption in transit and at rest.
Evidence an auditor will ask for
Crypto policy, KMS configs, TLS scan results.
Document template for this control
The Cryptography & Key Management Policy template gives you auditor-ready wording that fulfils Annex A 8.24. Preview the full document before you download the editable version.