| Direct-Attached Storage (DAS) | Storage devices connect directly to one computer or server through a local interface. | Individual workstations, small servers, and local high-speed file access. | Low latency and straightforward deployment. | Usually has limited sharing and may create a single point of failure. | Use separate backups, access controls, disk monitoring, and encryption where sensitive data is stored. |
| Network-Attached Storage (NAS) | A dedicated device provides shared files over a local network using file-based protocols. | Team collaboration, shared documents, and centralized departmental files. | Centralized access with permissions and shared-folder management. | Network outages, device failure, or ransomware can affect shared access. | Configure user permissions, snapshots, immutable or offline backups, and encrypted network connections. |
| Storage Area Network (SAN) | A specialized network presents block storage to servers, often for databases and virtual machines. | Enterprise workloads requiring high performance and centralized storage management. | Consistent performance, scalability, and advanced availability features. | Higher cost, operational complexity, and specialized administration requirements. | Separate storage redundancy from backup, restrict administrative access, and test recovery procedures. |
| Object Storage | Data is stored as objects with content, metadata, and a unique identifier, commonly accessed through APIs. | Unstructured data, archives, media, logs, and large-scale analytical datasets. | High durability potential, elastic capacity, and rich metadata support. | Not ideal for every low-latency or traditional file-system workload. | Enable versioning, access logging, retention controls, encryption, and protection against unauthorized deletion. |
| Cloud Storage | Storage capacity is delivered over a network and managed through provider-controlled infrastructure and service interfaces. | Flexible capacity, remote access, backup repositories, and distributed applications. | Rapid scaling without purchasing and maintaining all physical equipment. | Costs, performance, availability, and data location depend on configuration and connectivity. | Review shared-responsibility duties, apply least privilege, encrypt data, and monitor access and spending. |
| 3-2-1 Backup Strategy | Maintain at least three copies of data, on two different storage media or systems, with at least one copy off-site. | Reducing exposure to hardware failure, human error, malware, and site-level incidents. | Creates multiple recovery paths instead of relying on one storage system. | It is a planning framework, not a guarantee; copies must still be monitored and tested. | Use an offline or immutable copy when possible, define recovery objectives, and perform documented restore tests. |
| Encryption at Rest | Data is cryptographically protected while stored on disks, databases, removable media, or backup repositories. | Sensitive personal, financial, operational, and confidential information. | Reduces the usefulness of stolen or improperly accessed storage media. | Lost keys, weak key access controls, or unencrypted copies can undermine protection. | Protect keys separately, limit key access, rotate keys according to risk, and verify that backups are also encrypted. |
| Encryption in Transit | Data is encrypted while moving between users, systems, networks, or storage services. | File transfers, remote administration, application traffic, and backup replication. | Helps prevent interception or alteration during transmission. | Does not protect data after it reaches an exposed endpoint or improperly secured destination. | Use authenticated secure protocols, certificate validation, and endpoint security controls. |
| Lifecycle Policy | Rules define how data is created, classified, accessed, retained, archived, and securely deleted. | Managing cost, compliance obligations, retention periods, and information sprawl. | Aligns storage location and cost with the data’s business value and access frequency. | Incorrect retention rules can cause premature deletion or unnecessary storage expense. | Document owners and retention periods, apply legal holds where required, and securely dispose of expired data. |