Data Storage Security Management System(DSSMS)

Certification Overview (Business Overview)

Data Storage Security Management System (DSSMS) Certification is a special information security system certification launched by Beijing NGV Certification Center. It is designed to build a standardized security management framework covering all data storage links of organizations and comprehensively evaluate enterprises' security control capabilities throughout the entire lifecycle of data storage.

This certification has completed standard version upgrade. Current audits are conducted based on a dual-standard combination. The new international standard ISO/IEC 27040:2024 Information technology — Security techniques — Storage security fully supersedes the old version ISO/IEC 27040:2015. Comprehensive audits are carried out in conjunction with CTS-NGV-MS-DSSMS-2025 Data Storage Security Management System — Basic Requirements, integrating cutting-edge international technical specifications for storage security and localized management requirements adapted to domestic industries and regulatory environments.

The certification covers all storage forms including on-premises hardware storage, distributed storage, cloud storage and network storage. It establishes control specifications around core modules such as storage equipment operation and maintenance, static data encryption, hierarchical access permission control, data backup and disaster recovery, security audit of storage logs, scrapping and destruction of storage media, and emergency response to storage risks. It systematically identifies potential security hazards in storage links including data leakage, loss, tampering and unauthorized access.

This certification product targets government authorities, financial institutions, medical institutions, internet enterprises, cloud computing providers, intelligent manufacturing companies, data service providers and all other enterprises and public institutions holding massive business data. It verifies an organization’s maturity in storage security management through standardized certification, assists enterprises in complying with domestic laws and regulations on data security, improves their information security governance systems, and serves as an authoritative credential to demonstrate data security capabilities in bidding and commercial cooperation.

Certification Rules

ISO/IEC 27040：2015

CTS-NGV-MS-DSSMS-2025

ISO/IEC 27040：2024

CTS-NGV-MS-DSSMS-2025

Certification Standards (Evaluation Basis)

Title: Rules for Data Storage Security Management System Certification

Document No.: NGV-GZ-DSSMS-2021

Issued by: Beijing NGV Certification Center Co., Ltd.

All intellectual property rights of the above certification rules belong to Beijing NGV Certification Center Co., Ltd., which reserves the right of final interpretation.

Please contact us via the following information to obtain relevant implementation rules:

Telephone: 010-87531381; 010-87531396

Email: chenxj@ngv.org.cn; hexinran@ngv.org.cn