On 18 June 2025, the National Cybersecurity Standardization Administration opened a consultation on the national standard on guidelines for storage security of network security technology, until 17 August 2025. The standard applies to entities involved in the ownership, operation or use of data storage devices, media, and networks, including those responsible for information security, procurement, and infrastructure design. It modifies and supplements International Organization for Standardization's standard ISO/IEC 27040:2024 on Information technology security techniques including storage security by introducing additional storage security control measures aligned with domestic standards. The standard adapts terminology, encryption requirements, and data erasure provisions to Chinese technical and regulatory conditions.
Original source