Skip to content

Remediation Catalogue

What this screen is for

This screen lists, for each kind of compliance control, which group its actions belong to, the steps that fix it, and when the action closes. Every step is an operation the platform already offers on other screens; the plan only proposes it and runs it after you confirm.

What must exist first

  • The permission to read your tenant's analytics shows the catalogue.

Decisions you make here

Automatic

  • Cryptoperiod: set the key's expiry date within its maximum cryptoperiod. When less than 90 days would remain, rotate the key with the same algorithm and a new expiry instead. Closes when every live key is within its maximum.
  • Policy profile: apply one of the platform's explicit algorithm policy templates; the control names none, so the preview lists the candidates. Closes when the tenant declares a template.

Guided

  • Algorithm admissibility, minimum security level, hybrid use and calendar entries: rotate the key to an admissible algorithm, keeping its identifier. Where a rotation is not possible, create a successor key and revoke the old one as algorithm-deprecated. Closes when the evaluation stops naming the key.

Decision

  • Key custody: rotate to an admissible stateless signature algorithm, or replace the key with a public-only import, which you do yourself. Closes when the evaluation stops naming the key.
  • Evidence integrity: no step. Open a security incident. The plan never closes it.
  • Tenant key-encryption key cryptoperiod: no step in this plan. On a key the platform rotates, the platform operator rotates it now or shortens its carrier's period; on an ANKA-managed cloud key, the platform operator enables the provider's rotation; on your own key, you enable rotation at your provider, with a period of 730 days or less. Closes when the key is within its cryptoperiod.

Steps the plan never takes

The catalogue holds no step that destroys, archives, deletes or suspends a key, and none that re-encrypts or re-signs data.

How it relates to other screens

The plan applies this catalogue to your tenant's findings:

Where to read more