What must be kept up to date to maintain security effectiveness?

What must be kept up to date to maintain security effectiveness?

• A. Intrusion-detection and prevention engines, baselines, and signatures.
• B. Firewall rule sets only.
• C. Encryption keys only.
• D. User access lists only.

Answer: (C)

Keeping encryption keys up to date is essential because the protection provided by encryption hinges on the keys themselves. Regular key rotation limits exposure if a key is compromised and allows you to adopt stronger algorithms or longer key lengths as standards evolve. A solid key-management program covers generation, secure storage, distribution, rotation, and revocation, aligning with PCI requirements to protect cardholder data. While other controls like IDS/IPS updates or firewall rule refreshes are important, the ongoing effectiveness of encrypted data protection directly depends on maintaining current, well-protected keys.

Keeping encryption keys up to date is essential because the protection provided by encryption hinges on the keys themselves. Regular key rotation limits exposure if a key is compromised and allows you to adopt stronger algorithms or longer key lengths as standards evolve. A solid key-management program covers generation, secure storage, distribution, rotation, and revocation, aligning with PCI requirements to protect cardholder data. While other controls like IDS/IPS updates or firewall rule refreshes are important, the ongoing effectiveness of encrypted data protection directly depends on maintaining current, well-protected keys.