Control: ism-0476; Revision: 7; Updated: Mar-22; Applicability: P; Essential Eight: N/A ​

When using RSA for digital signatures, and passing encryption session keys or similar keys, a modulus of at least 2048 bits is used, preferably 3072 bits.