Editing Key management (section)

==Compliance==
Key management compliance refers to the oversight, assurance, and capability of being able to demonstrate that keys are securely managed. This includes the following individual compliance domains:

* ''Physical security'' – the most visible form of compliance, which may include locked doors to secure system equipment and surveillance cameras. These safeguards can prevent unauthorized access to printed copies of key material and computer systems that run key management software.
* ''Logical security'' – protects the organization against the theft or unauthorized access of information. This is where the use of cryptographic keys comes in by encrypting data, which is then rendered useless to those who do not have the key to decrypt it.
* ''Personnel security'' – this involves assigning specific roles or privileges to personnel to access information on a strict need-to-know basis. Background checks should be performed on new employees along with periodic role changes to ensure security.<ref name="Turner-What-is-key-management" /><ref name="Reinholm-KeyManagementCompliance">{{cite web|last1=Reinholm|first1=James H.|title=Simplifying the Complex Process of Auditing a Key Management System for Compliance|url=http://www.cryptomathic.com/news-events/blog/simplifying-the-complex-process-of-auditing-a-key-management-system-for-compliance|publisher=Cryptomathic|access-date=30 May 2016}}</ref>

[[Regulatory compliance|Compliance]] can be achieved with respect to national and international [[Information privacy|data protection]] standards and regulations, such as [[Payment Card Industry Data Security Standard]], [[Health Insurance Portability and Accountability Act]], [[Sarbanes–Oxley Act]], or [[General Data Protection Regulation]].<ref name="Stubbs-Buyer's guide">{{cite web|last1=Stubbs|first1=Rob|title=Buyer's Guide to Choosing a Crypto Key Management System|url=https://www.cryptomathic.com/news-events/blog/buyers-guide-to-choosing-a-crypto-key-management-system|publisher=Cryptomathic|access-date=12 March 2018}}</ref>