Organization ensures confidentiality and integrity of all data at rest is protected across all storage systems:
- Cloud storages
- File hosting services
- Databases
- Data warehouses
The data can be protected by using physical and logical means.
Physical protection for data stored is ensured by using secure facilities, such as locked rooms or data centers, that prevent unauthorized physical access.
Logical protection is done by encrypting stored data using strong cryptographic algorithms and strict access control, ensuring only authorized users and systems can access the data.