ICS35.020 L00/09 团体标准 T/CFEII0007—2023 数据存储安全能力成熟度模型 Datastoragesecuritycapabilitymaturitymodel 2023-01-13发布 2023-01-13实施 中国电子信息行业联合会 发布 全国团体标准信息平台 全国团体标准信息平台 T/CFEII0007-2023 I目次 前言..............................................................................III 引言...............................................................................IV 1范围..............................................................................1 2规范性引用文件....................................................................1 3术语和定义........................................................................1 4缩略语............................................................................2 5成熟度模型........................................................................2 5.1模型架构......................................................................2 5.2支持维度......................................................................3 5.3等级维度......................................................................4 5.4能力域维度....................................................................5 6组织规划..........................................................................6 6.1组织和人员管理................................................................6 6.2安全策略规划..................................................................7 6.3数据分类识别..................................................................8 6.4安全风险评估..................................................................8 6.5存储合规审计..................................................................9 7基础保障.........................................................................10 7.1存储软件.....................................................................10 7.2存储硬件.....................................................................11 7.3存储网络.....................................................................13 7.4供应链安全...................................................................14 8绿色节能.........................................................................15 8.1存储设施节能.................................................................15 8.2存储介质节能.................................................................16 8.3算法节能.....................................................................17 9存储加密.........................................................................18 9.1静态数据加密.................................................................18 9.2动态数据加密.................................................................18 9.3密钥管理.....................................................................19 10存储运维........................................................................20 10.1数据保存....................................................................20 10.2数据迁移....................................................................21 10.3数据销毁....................................................................22 11容灾备份........................................................................23 11.1数据备份....................................................................23 11.2灾难恢复....................................................................24 12资源管理........................................................................25 12.1存储资源配置................................................................25 12.2存储虚拟化..................................................................26 全国团体标准信息平台 T/CFEII0007-2023 II12.3安全多租户..................................................................27 13访问管理........................................................................28 13.1身份验证....................................................................28 13.2数据访问控制................................................................29 13.3行为审计....................................................................30 参考文献...........................................................................31 全国团体标准信息平台