信息技术 - Tls存储系统规范

[中文适用范围]： 本规范详细说明了传输层安全 (TLS) 协议与数据存储技术结合使用的要求。本规范中列出的要求旨在促进存储客户端和服务器以及可能具有类似互操作性需求的非存储技术之间的安全互操作性。本规范适用于所有拥有、操作或使用数据存储设备的人员，包括高级管理人员、存储产品和服务的采购方以及其他非技术管理人员或用户，以及对信息安全和/或存储安全、存储运营负有特定责任的经理和管理员，或负责组织整体安全计划和安全策略制定的人员。本规范也适用于所有参与存储安全架构规划、设计和实施的人员。 [外文原描述]： ISO/IEC 20648:2016 details the requirements for use of the Transport Layer Security (TLS) protocol in conjunction with data storage technologies. The requirements set out in this specification are intended to facilitate secure interoperability of storage clients and servers as well as non-storage technologies that may have similar interoperability needs. ISO/IEC 20648:2016 is relevant to anyone involved in owning, operating or using data storage devices. This includes senior managers, acquirers of storage product and service, and other non-technical managers or users, in addition to managers and administrators who have specific responsibilities for information security and/or storage security, storage operation, or who are responsible for an organization's overall security program and security policy development. It is also relevant to anyone involved in the planning, design and implementation of the architectural aspects of storage security.