Overview

This document provides detailed technical guidance on how organizations can define an appropriate level of risk mitigation by employing a well-proven and consistent approach to the planning, design, documentation, and implementation of data storage security. Storage security applies to the protection (security) of information where it is stored and to the security of the information being transferred across the communication links associated with storage. Storage security includes the security of devices and media, the security of management activities related to the devices and media, the security of applications and services, and security relevant to end-users during the lifetime of devices and media and after end of use.

Document: references other documents

Document: referenced in other documents

Responsible national committee

NA 043-04-27-04 AK - Security controls and services  

Responsible european committee

CEN/BT - BT Technical Board  

Responsible international committee

ISO/IEC JTC 1/SC 27/WG 4 - Security controls and services