ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Storing a duplicate of a critical private key with a trusted third-party, while enforcing that multiple authorized individuals must cooperate to retrieve and use it, is the essence of key escrow with split (or dual) control. Key escrow provides a securely held backup of the key outside the primary location, and split-knowledge/multi-person control ensures that no single individual can unilaterally access or misuse the key. Key rotation changes keys on a schedule but does not guarantee recoverability; key wrapping only protects keys in transit or storage but does not address shared control; certificate pinning and OCSP stapling are certificate validation techniques, not key recovery methods.