China: National Cybersecurity Standardization Administration closes consultation on national standard on guidelines for storage security of network security technology

On 17 August 2025, the National Cybersecurity Standardization Administration closes the consultation on the national standard on guidelines for storage security of network security technology. The standard applies to entities involved in the ownership, operation, or use of data storage devices, media, and networks, including those responsible for information security, procurement, and infrastructure design. It modifies and supplements the International Organization for Standardization's standard ISO/IEC 27040:2024 on Information technology security techniques, including storage security, by introducing additional storage security control measures aligned with domestic standards. The standard adapts terminology, encryption requirements, and data erasure provisions to Chinese technical and regulatory conditions.