Cryptography is the set of techniques protecting confidentiality, integrity and authenticity of information through mathematical algorithms.
In ISO 27001 context, cryptography (ISO 27002:2022 control A.8.24) covers policies for cryptographic controls and key management. It includes encryption at rest and in transit, digital signatures, hashing and key lifecycle management.
ISO 27002 requires recognized, current algorithms. AES-256 for symmetric and RSA-2048+ for asymmetric are current standards.
Not by itself. Must be complemented with access controls, monitoring, incident management and staff awareness.
Need an assessment in this area?