Secure Storage Glossary

Secure storage, cybersecurity, and compliance come with a lot of terminology. Use this glossary as a quick reference for common terms related to data-at-rest protection, secure SSDs, certifications, storage technology, and modern computing environments.

---

Jump to: A | C | D | E | F | H | I | M | N | O | P | R | S | T | U | Z

---

A

AES (Advanced Encryption Standard)

A widely used encryption standard designed to protect sensitive data by converting it into an unreadable format without the appropriate encryption key.

AES-256

A form of AES encryption that uses a 256-bit encryption key. AES-256 is commonly used to protect sensitive and mission-critical data.

Authentication

The process of verifying the identity of a user, device, or system before allowing access to protected data or resources.

Authentication Token

A physical or digital credential used to verify identity and authorize access to a protected system or device.

C

Client SSD

A solid-state drive designed for endpoint devices such as laptops, desktops, and workstations.

Common Criteria (CC)

An internationally recognized framework used to evaluate the security capabilities of information technology products.

Controller

A component within an SSD that manages communication between the system and NAND flash memory, including how data is read, written, and managed.

COTS (Commercial Off-the-Shelf)

Commercially available products that can be purchased and deployed without being developed specifically for a single customer or program.

Cryptographic Module

Hardware, software, firmware, or a combination of these components that performs cryptographic functions such as encryption and key management.

CSfC (Commercial Solutions for Classified)

An NSA program that enables organizations to use approved commercial technologies in layered solutions to protect classified information.

D

Data at Rest (DAR)

Data that is stored on a physical device or storage system rather than actively moving across a network.

Data Sanitization

The process of permanently removing data from storage media so that it cannot reasonably be recovered.

E

E1.S

An enterprise SSD form factor designed to provide high-performance NVMe storage in compact server and edge computing environments.

E3.S

An enterprise SSD form factor designed to support high-performance, high-capacity storage in modern server and edge platforms.

Edge Computing

A computing model in which data is processed and stored closer to where it is generated or used rather than relying entirely on a centralized data center or cloud environment.

Embedded System

A computing system designed to perform a dedicated function within a larger device, platform, or piece of equipment.

Encryption

The process of converting readable data into a protected format that can only be accessed with the appropriate authorization or cryptographic key.

Encryption Key

A value used by a cryptographic algorithm to encrypt or decrypt protected information.

Endurance

A measurement of how much data an SSD can reliably write over its expected operating life.

Enterprise SSD

A solid-state drive designed for servers, edge systems, and other environments requiring greater performance, reliability, endurance, or capacity.

EOL (End of Life)

The point at which a manufacturer discontinues the production or support of a product.

Endpoint

A device at the edge of a network, such as a laptop, desktop, workstation, or other computing device where data may be created, accessed, or stored.

Endpoint-to-Edge

An approach to protecting and managing data across endpoint devices and edge computing environments while maintaining security, governance, and reliability.

F

FIPS 140-3

A U.S. government security standard specifying requirements for cryptographic modules used to protect sensitive information.

Firmware

Software embedded within a hardware device that controls its operation and functionality.

Form Factor

The physical size, shape, interface, and mechanical specifications of a storage device. Common SSD form factors include M.2, U.2, E1.S, and E3.S.

H

Hardware-Based Encryption

Encryption performed by dedicated hardware within a device rather than relying primarily on software running on the host system.

I

IOPS (Input/Output Operations Per Second)

A performance measurement indicating how many individual read and write operations a storage device can process each second.

M

M.2

A compact storage form factor commonly used for SSDs in laptops, workstations, embedded systems, and other space-constrained devices.

MFA (Multi-Factor Authentication)

A security method requiring two or more forms of verification before access is granted.

Mission-Critical

A system, application, device, or data set that is essential to the successful operation of an organization or mission.

N

NAND Flash

Non-volatile memory technology commonly used in SSDs to retain stored data even when power is removed.

NIAP (National Information Assurance Partnership)

A U.S. government program responsible for evaluating commercial IT products against approved security requirements using the Common Criteria framework.

NIST (National Institute of Standards and Technology)

A U.S. government agency that develops standards, guidelines, and best practices used across cybersecurity, cryptography, and information technology.

NIST SP 800-88

NIST guidelines for media sanitization that provide methods for securely removing data from storage devices before reuse, disposal, or transfer.

NVMe (Non-Volatile Memory Express)

A storage protocol designed specifically for high-speed flash storage using PCIe connectivity.

O

OEM (Original Equipment Manufacturer)

A company that manufactures systems or equipment that may incorporate components or technologies from other manufacturers.

P

PBA (Pre-Boot Authentication)

A security process that requires a user to authenticate before the operating system is allowed to load and protected storage becomes accessible.

PCIe (Peripheral Component Interconnect Express)

A high-speed interface used to connect components such as NVMe SSDs to a computing system.

Product Lifecycle

The stages a product moves through from introduction and active production through transition and eventual end of life.

R

Read/Write Speed

A measurement of how quickly a storage device can retrieve existing data or save new data.

Ruggedized

Designed to operate reliably in demanding environmental conditions that may include vibration, shock, temperature extremes, or other physical stresses.

S

SATA (Serial ATA)

A storage interface commonly used to connect SSDs and hard drives to computing systems.

Secure Boot

A security capability designed to ensure that a system starts using trusted and authorized software or firmware.

Secure Erase

A process or command designed to securely remove data stored on a storage device.

SED (Self-Encrypting Drive)

A storage device that performs encryption and decryption within the drive itself using built-in hardware capabilities.

SSD (Solid-State Drive)

A storage device that uses flash memory rather than moving mechanical components to store data.

Supply Continuity

The ability to maintain reliable access to products and components over time to support customer deployments, programs, and lifecycle requirements.

System Integrator

An organization that combines hardware, software, and other technologies into a complete system or solution for a customer.

T

TAA (Trade Agreements Act)

A U.S. law that establishes country-of-origin requirements for certain federal government procurements.

TAA Compliant

A designation indicating that a product meets applicable Trade Agreements Act country-of-origin requirements for eligible federal procurement.

Tactical Edge

Computing and storage deployed close to mission operations, including remote, mobile, disconnected, or otherwise demanding environments where timely access to data is critical.

TBW (Terabytes Written)

An SSD endurance measurement representing the total amount of data that can be written to a drive during its rated operating life.

U

U.2

A 2.5-inch SSD form factor commonly used to provide high-performance NVMe storage in enterprise servers and other computing systems.

Z

Zero Trust

A cybersecurity approach based on continuously verifying users, devices, and access rather than assuming that anything inside a network should automatically be trusted.