The organization stores paper documents and other non-digital information:
- in a suitable office cabinet within a security area or administrative area, or
- temporarily outside security areas if the information handler has committed to following the compensating measures specified in the issued security instructions.
The organization stores digital information:
- in a compliant device or electronic medium within a security area or administrative area, or
- outside security areas, in a compliant terminal device or electronic medium located in a supervised space or in a suitable locked office cabinet, security bag, or in an equivalent manner.
If the area does not have a storage solution assessed as sufficient for information storage, the walls, floor, ceiling, windows, and doors of the area must meet at least the RC3 class of the SFS-EN-1627 standard.
If a locked office cabinet is used as the storage unit for classified information, it must be ensured that any intrusion attempt leaves visible signs of forced entry.
