EKMS Managers are required to conduct how many spot checks?

• A. At least 6 per year
• B. At least 9 per year
• C. At least 12 per year
• D. At least 15 per year

Answer: (C)

Spot checks verify that the EKMS inventory matches the official accounting records, providing ongoing assurance that cryptographic material is accounted for and secure. Conducting these checks on a monthly basis creates a steady reinforcement of accuracy, catching any discrepancies early and maintaining strong accountability for keys and related materials. This regular cadence supports audit readiness and reduces the risk of loss, tampering, or misplacement slipping through the cracks. Less frequent checks create gaps where issues can accumulate, while more frequent checks aren’t typically required by policy and can add unnecessary workload. So, monthly spot checks are the standard, best-practice approach.