Storage Security
What is Storage Security?
Security measures for protecting data storage systems and media including access controls, encryption, integrity verification, and secure disposal.
Terms that appear alongside storage security
Each of these is named in at least one of the same controls as storage security. The number is how many controls name both.
- nist 4 shared controls
- encryption 3 shared controls
- audit 3 shared controls
- transparency 3 shared controls
- fips 2 shared controls
- iec 27001 2 shared controls
- ipsec 2 shared controls
- tls 2 shared controls
Frameworks that govern storage security
What the standards actually require on storage security
Requirements naming storage security across 6 standards, quoted from the control text.
Storage security should be designed in from the start on established principles: defence in depth across devices, networks, management and data; least privilege and separation of duties for storage administration; secure defaults and hardening;
iso-iec-27040-2024::10.2.2 · Storage security design principles →Secure runtime storage: encryption of data at rest, secrets management, volume access control and persistent-data protection.
CNCF-RT-STORAGE · Runtime Storage Security →ISMAP Data Protection establishes comprehensive data lifecycle controls. (1) Data Classification: customer government data must be classified per Japanese government data classification scheme + including (a) General + (b) Sensitive + (c) Confidential + (d) St...
ISMAP-DataProtection-Classification-Encryption-DataResidencyJapan-Backup-SecureDeletion-Cryptography-FIPS · ISMAP Data Protection - Data Classification + AES-256 Encryption At Rest + TLS 1.3 In Transit + Data Residency Japan + Backup + Secure Deletion + Cryptography per FIPS 140-3 + CRYPTREC + KMS HSM →Security Dimension 6 Data Integrity per X.805 Clause 6.6: Data Integrity keeps data correct and accurate. Data are shielded from being altered, deleted, created or copied without authorization, and any such unauthorized activity is made detectable.
X805-Dim6-Data-Integrity-Correctness-Accuracy-Unauthorized-Modification-Deletion-Detection · ITU-T X.805 Security Dimension 6 - Data Integrity + Correctness + Accuracy + Unauthorized Modification Prevention + Deletion Detection + Hashing + HMAC + Digital Signatures + Merkle Trees + Blockchain Integrity + File Integrity Monitoring (FIM) →Documents are handled with processes for appropriate use, access, transfer, storage, security, retrieval, retention, destruction and disposal that suit the scope and complexity of the supports delivered.
australia-ndis-practice-standards-and-quality-indicators::core-12.4 · Information management: secure handling through to retention and destruction →Backups of information, software and systems are to be kept and tested regularly as the agreed topic-specific backup policy requires. Purpose: be able to get data and systems back after they are lost.
iso-27002-2022::8.13 · Information backup →Questions people ask about storage security
What is Storage Security?
Why is Storage Security important for compliance?
Which compliance frameworks address Storage Security?
Where can I learn more about Storage Security?
See how Storage Security applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.