The standard breaks down storage security into several critical technical areas to ensure "defense-in-depth":
: Organizations like ANSI (United States), BSI (United Kingdom), or DIN (Germany) distribute localized versions of the publication. iso iec 27040 pdf
Mandatory use of multi-factor authentication (MFA) and granular, role-based access policies. The standard breaks down storage security into several
Apply the technical controls suggested, such as enabling encryption on SAN switches or implementing access controls on file shares. BSI (United Kingdom)
Storage networks require isolated security controls distinct from general corporate networks. The standard outlines security measures for protocols such as: