Policy Advisory  Cryptographic Management Standard

Date:	01/01/2025
Organization:	Cybersecurity and Enterprise Risk Management
Referenced Sources:	MGL Chapter 7D, Section 2

The Cryptographic Management Standard reinforces the Commonwealth’s commitment to an effective cryptographic management strategy and outlines the controls necessary to safeguard the Commonwealth’s information assets and reduce risks.

Purpose

This standard establishes requirements for cryptography and encryption techniques for the Commonwealth. Cryptographic controls will be used to protect confidentiality (e.g., encryption), authenticity and integrity (e.g., digital signatures or message authentication codes).