[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nis2\u002F21-2-h":3},{"item":4,"lessons":16,"controls":35,"related":54},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nis2","21-2-h","Article 21(2)(h)","Cryptography and encryption (Article 21(2)(h))",0,"Directive (EU) 2022\u002F2555 (NIS2)","**What it asks for.** Point (h) requires policies and procedures on the use of cryptography and, where appropriate, encryption. Entities need a deliberate approach to protecting data with sound cryptographic methods.\n\n**In practice.** A cryptography policy sets approved algorithms and key lengths, defines where encryption is required for data at rest and in transit, and describes key management through generation, storage, rotation and destruction. Certificates are inventoried and renewed in time, and future needs such as post quantum migration are considered. Evidence includes the policy, key management procedures and certificate and encryption inventories.\n\n**Common gaps.** Key management is often informal, and certificate expiry still causes outages. Many entities lack an inventory of where cryptography is used, which makes algorithm changes hard.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002FHTML\u002F?uri=CELEX:32022L2555#art_21","Read the official text on EUR-Lex","2026-10-18T15:18:43.664+00:00",{"total":17,"list":18},4,[19,23,27,31],{"slug":20,"title":21,"published_at":22},"buggy-workaround-script-caused-emudhra-to-issue-cryptographically-weak-certificates","Buggy Workaround Script Caused eMudhra to Issue Cryptographically Weak Certificates","2026-11-12T05:20:20.672+00:00",{"slug":24,"title":25,"published_at":26},"buggy-key-migration-script-compromises-16-emudhra-ca-certificates","Buggy Key Migration Script Compromises 16 eMudhra CA Certificates","2026-11-11T22:20:25.443+00:00",{"slug":28,"title":29,"published_at":30},"ubuntu-closes-ssl-revocation-gap-in-curl-bringing-browser-grade-certificate-checks-to-cli-tools","Ubuntu Closes SSL Revocation Gap in curl, Bringing Browser-Grade Certificate Checks to CLI Tools","2026-11-11T18:20:25.132+00:00",{"slug":32,"title":33,"published_at":34},"buggy-script-fatally-weakened-ca-private-keys-destroying-trust-in-emudhra","Buggy Script Fatally Weakened CA Private Keys, Destroying Trust in eMudhra","2026-11-11T14:20:46.892+00:00",[36,40,45,50],{"slug":37,"name":38,"problem":39,"stories":17},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",{"slug":41,"name":42,"problem":43,"stories":44},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",3,{"slug":46,"name":47,"problem":48,"stories":49},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",1,{"slug":51,"name":52,"problem":53,"stories":49},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[55,60,65,70,74,78,83,87],{"family":56,"item":57,"code":58,"title":59,"together":44},"nist-800-53","sc-12","SC-12","Cryptographic Key Establishment and Management",{"family":61,"item":62,"code":63,"title":64,"together":44},"iso-27001","a-8-24","Annex A 8.24","ISO\u002FIEC 27001:2022 Annex A 8.24: Use of cryptography",{"family":56,"item":66,"code":67,"title":68,"together":69},"sa-11","SA-11","Developer Testing and Evaluation",2,{"family":56,"item":71,"code":72,"title":73,"together":49},"sa-10","SA-10","Developer Configuration Management",{"family":56,"item":75,"code":76,"title":77,"together":49},"sc-17","SC-17","Public Key Infrastructure Certificates",{"family":79,"item":80,"code":81,"title":82,"together":49},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",{"family":79,"item":84,"code":85,"title":86,"together":49},"pr-ps","PR.PS","PR.PS: Platform Security",{"family":88,"item":89,"code":90,"title":91,"together":49},"cis","16","Control 16","Application Software Security"]