The asset owner shall have policies and procedures related to utilizing commonly accepted cryptographic mechanisms in the IACS.