SC-12(1): Cryptographic Key Establishment and Management | Availability
Control Text:
Maintain availability of information in the event of the loss of cryptographic keys by users.
Escrowing of encryption keys is a common practice for ensuring availability in the event of key loss. A forgotten passphrase is an example of losing a cryptographic key.