0-1 | Scope and purpose | 0 |
10.10 | File-based storage | 0 |
10.10.2 | NFS-based NAS | 0 |
10.10.3 | SMB-based NAS | 0 |
10.11 | Cloud computing storage | 0 |
10.11.1 | Securing cloud computing storage | 0 |
10.11.2 | CDMI security | 0 |
10.12 | Object-based storage | 0 |
10.13 | Data reductions | 0 |
10.14 | Data protection and recovery | 0 |
10.14.2 | Storage backups | 0 |
10.14.3 | Storage replication | 0 |
10.14.4 | Storage snapshots | 0 |
10.15 | Data archives and repositories | 0 |
10.15.2 | Data archives | 0 |
10.15.3 | Data Repositories | 0 |
10.16 | Virtualization | 0 |
10.16.1 | Storage virtualization | 0 |
10.16.2 | Storage for virtualized systems | 0 |
10.17 | Secure multi-tenancy | 0 |
10.18 | Secure autonomous data movement | 0 |
10.2 | Design and implementation of storage security | 0 |
10.2.2 | Storage security design principles | 0 |
10.2.3 | Storage system quality attributes | 0 |
10.2.4 | Retention, preservation, and disposal of data | 0 |
10.3 | Storage systems security | 0 |
10.3.1 | System hardening | 0 |
10.3.2 | Security auditing, accounting, and monitoring | 0 |
10.3.3 | Storage vulnerability management | 0 |
10.4 | Storage management | 0 |
10.4.2 | Authentication and authorization | 0 |
10.4.3 | Secure the management interfaces | 0 |
10.5 | Data confidentiality | 0 |
10.5.2 | Encryption and key management issues | 0 |
10.5.3 | Encryption of storage | 0 |
10.5.4 | Encrypting transferred data | 0 |
10.5.5 | Encrypting data at rest | 0 |
10.6 | Storage sanitization | 0 |
10.6.2 | Selection of sanitization methods | 0 |
10.6.3 | Media-based sanitization | 0 |
10.6.4 | Logical sanitization | 0 |
10.6.5 | Cryptographic erase | 0 |
10.6.6 | Verification of storage sanitization | 0 |
10.6.7 | Proof of sanitization | 0 |
10.7 | Direct attached storage | 0 |
10.8 | Storage networking | 0 |
10.8.2 | Storage area networks | 0 |
10.8.3 | Network Attached Storage protocols | 0 |
10.9 | Block-based storage | 0 |
10.9.1 | Fibre Channel (FC) storage | 0 |
10.9.2 | IP storage | 0 |
2-4 | Normative references, terms and abbreviations | 0 |
5 | Structure of this document and controls | 0 |
6 | Overview and concepts: storage concepts, storage security, storage security risks | 0 |
7 | Organizational controls for storage | 0 |
7.2 | Align storage and policy | 0 |
7.3 | Business continuity management | 0 |
7.4 | Compliance | 0 |
8 | People controls for storage | 0 |
9 | Physical controls for storage | 0 |
9.2 | Physically secure storage | 0 |
9.3 | Protect physical interfaces to storage | 0 |
9.4 | Isolation of storage systems | 0 |
A | Annex A (informative): storage security controls summary | 0 |