It serves as a specialized extension of the ISO/IEC 27001 management system and ISO/IEC 27002 security controls. 2. Storage Security Risks