The organization stores paper documents and other non-digital information:

• in a suitable office cabinet within a security area or administrative area, or
• temporarily outside security areas if the information handler has committed to following the compensating measures specified in the issued security instructions.

The organization stores digital information:

• in a compliant device or electronic medium within a security area or administrative area, or
• outside security areas, in a compliant terminal device or electronic medium located in a supervised space or in a suitable locked office cabinet, security bag, or in an equivalent manner.

If the area does not have a storage solution assessed as sufficient for information storage, the walls, floor, ceiling, windows, and doors of the area must meet at least the RC3 class of the SFS-EN-1627 standard.

If a locked office cabinet is used as the storage unit for classified information, it must be ensured that any intrusion attempt leaves visible signs of forced entry.