Members LoginJoin TCG

Trusted Knowledge, Openly Shared

View all resources

Blogs

Trends, technical deep dives, case studies and interviews from across the trusted computing community.

Documents

Searchable by technology and Work Group, with planned ISO/NIST tagging for compliance mapping.

Educational Content

Free courses and hands-on labs covering TPM, cryptography basics, TSS and attestation.

Events & Webinars

Conferences, webinars and Plugfests where the trusted computing community meets.

Github

Reference code, tools and implementations maintained by TCG and its Work Groups.

Guides & White Papers

Use-case explainers, best practices and executive summaries organised by vertical.

Public Review

Draft TCG specifications open for public comment before publication, and how to take part.

View all resources

Our Core Technologies & Standards

View all Technologies

Block Integrated Trust (BIT)

Brings trusted computing principles to block-level storage, enabling integrity, attestation, and protection of data blocks at the device layer.

Cyber Resilient Technologies (CyRes)

TCG's cyber-resilience technology for protecting persistent code, detecting unexpected states, and recovering platforms to a known trusted state.

Device Identifier Composition Engine (DICE)

Device Identifier Composition Engine establishes a unique cryptographic identity for resource-constrained devices and IoT systems with minimal hardware.

Platform Certificates

TCG's provenance artifacts asserting Roots of Trust, Trusted Building Blocks, and component composition for supply-chain assurance and attestation appraisal.

Reference Integrity Manifest (RIM)

Signed, machine-readable reference measurements used to verify a device boots and runs in its expected, trusted state.

Storage Security

TCG's architecture for interoperable security on trusted storage devices: self-encrypting drives, access control, locking, and Opal, Ruby, and Opalite classes.

TPM Software Stack (TSS)

A consistent software interface that lets applications and operating systems interact with TPM hardware across vendors, architectures, and platforms.

Trusted Platform Module (TPM)

Hardware-based root of trust that securely generates and stores cryptographic keys, attesting to the integrity of the platform it runs on.

View all Technologies

Where Experts Drive the Standards

View all Work Groups

Aerospace and Non-Terrestrial Systems Solutions

Attestation

Block Integrated Trust (BIT)

Cyber Resilient Technologies (CyRes)

Device Identifier Composition Engine (DICE)

Greater China

Infrastructure

Internet Of Things (IoT)

Japan

Mobile

Network Equipment

PC Client

Server

Storage

TPM Software Stack (TSS)

Trusted Platform Module (TPM)

Vehicle Services

Virtualized Platform

View all Work Groups

Securing Every Sector, Together

View all industries

Aerospace

Agriculture & Construction

Automotive

Education & Government

Energy & Smart Grid

Finance

Healthcare

Insurance

Manufacturing & Industrial Control

Media & Entertainment

Real Estate & Hospitality

Retail, Logistics & Transportation

Telecommunications

View all industries

Built by the Industry, for the Industry

Join TCG

About us

Learn who we are, how our standards are built, and the people and Work Groups shaping trusted computing worldwide.

Contact

Questions about membership, certification or our specifications? Get in touch with the right team.

Events

Conferences, webinars and Plugfests where the trusted computing community meets.

News

Announcements, specification releases and updates from TCG and its members.

Vulnerability Disclosure Policy

How to report vulnerabilities in TCG specifications and how TCG handles and discloses them.

Join TCG

Be Part of What's Next

Join TCG

Become a Member

Compare membership levels and find the one that matches how much you want to shape the standards.

Certifications

Certify your TPM, storage or network product against TCG compliance and security requirements.

Member Login

Access the member workspace, Work Group drafts and specifications in progress.

Member News

Product launches, milestones and announcements from across the TCG membership.

TCG Members

The companies, research institutions, government agencies and standards bodies building trusted computing together.

Join TCG

Become part of TCG

Join now
Resources/
Guides & White Papers

Storage Security Best Current Practices

Guide

Tap to preview
Latest version

SNIATechnicalProposal-Security-BCPs 20080904

Last updated:Jan 6, 2009
Jan 6, 2009
38 pages
305 KB
Download

The SNIA Technical Document Storage Security Best Current Practices (BCPs) provide broad guidance to organizations seeking to secure their individual storage systems as well as their storage ecosystems. By focusing on best practices rather than a more minimalist set of requirements, organizations have flexibility in how they implement this guidance - as specific technology areas or in a phased approach, and so on.

This vendor neutral guidance, formally endorsed by the SNIA membership as a SNIA Technical Document, has a broad scope, covering both storage systems and the entire storage ecosystems. Storage security BCPs have been grouped into core BCPs and technology-specific BCPs. The core BCPs are applied to all storage systems and ecosystems. The technology-specific BCPs are above and beyond the core BCPs and more than one of these BCPs may be applicable in a given environment.

Published by Work Group
Storage

Explore other guides & white papers

View all

White Paper

TCG Storage, Opal, and NVMe

The Trusted Computing Group (TCG) and NVM Express have collaborated on a whitepaper. The Opal ñFamilyî of specifications published by the TCG provides a…
Work Group

Storage

Last updated

Aug 1, 2015

White Paper

Implementing Hardware Roots of Trust

SANS Institute has developed a first-of-its-kind guide and informational webcast to update organizations on exciting new uses for implementing hardware roots…
Work Group

Storage

Trusted Platform Module (TPM)

Last updated

Jun 1, 2013

Guide

Solutions Guide to Data-At-Rest

The SSIF Solutions Guide to Data-At-Rest, newly revised, provides an educational overview on solutions to mitigate the threat of loss of physical control of…
Work Group

Storage

Last updated

Jan 6, 2009

Become part of TCG

Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.

Compare Membership Levels

Shape the future of trusted computing: collaborate on the development of open standards and accelerate their adoption.

trusted computing group

3855 SW 153rd Drive, Beaverton, Oregon 97003, USA

+1‑503‑619‑0562admin@trustedcomputinggroup.org

Newsletter

Get updates on TCG standards, resources, and news.

[01]

Resources

  • Documents
  • Public Review
  • TCG Blog
  • Guides & White Papers
  • Educational Content
  • Events & Webinars

[02]

Standards & Work

  • Technologies
  • Work Groups
  • Industries

[03]

Membership

  • Become a Member
  • Members
  • Member News
  • Certifications

[04]

Organization

  • About TCG
  • News & Press Releases
  • Contact
  • Vulnerability Disclosure Policy
  • Legal Notices
  • Privacy Policy

© 2026 Trusted Computing Group. All Rights Reserved