the methods for creating and managing cryptographic keys and digital certificates.
method of properly issuing, maintaining and organizing encryption keys.
- needs to be managed - should be a formal process - need policies for when a key is breached, misused