Blockchain Transaction Lifecycle Security Standard Audit Framework

previous: Implement Upgrade Safety Controls | Contents | next: Verify Deployment Authorization

Secure Signed Stored Transactions

Statement of Requirement

Signature Managers MUST securely store signed transactions whose delivery to a Deployer is deferred, encrypted, with strong access control mechanisms

See it in the specification

Applicability

• Signature Managers

Purpose

Ensure that Stored transactions are only deployed as intended, and cannot be accessed and deployed maliciously or by accident.

Audit Procedure

Verify that any signed transaction that is stored has strong access control, high-quality encryption, and is stored securely

Success Criteria

• Stored transactions are appropriately protected against unauthorized deployment

Failure Criteria

• An unauthorized party or event can trigger deployment

Key Evidence

• Operational documentation
• Inspection and interview
• Storage logs
• Evidence provided for Secure Stored Transactions

previous: Implement Upgrade Safety Controls | Contents | next: Verify Deployment Authorization