Huawei OceanStor Dorado All-Flash Storage obtained the Common Criteria (CC) Evaluation Assurance Level (EAL) 4+ security certification, the highest level of security certification for storage products. The security evaluation was performed by Brightsight in Delft, the Netherlands, and the certificate was issued by TrustCB.
A CC EAL provides assurance on the security, reliability, and privacy protection of an IT product or solution. It is the most authoritative IT product security certification and is globally recognized. Certifications from EAL1 through EAL7 are offered, with higher levels requiring more detailed documentation and rigorous testing. Each higher level provides greater security assurance.
EAL4+ provides significantly higher security assurance than EAL3+, that Huawei obtained in 2021. It entails higher security standards for security functions, security design, configuration management, and security testing, as well as an in-depth review mechanism for source code. EAL4+ is currently the highest security level for a storage product.
Digitalization is transforming the world but comes with an increased risk of cyberattacks, exploitation of vulnerabilities, and ransomware. These threats traverse the physical and digital realms. As a result, data breach incidents, corruption, and data losses are becoming more common. Ensuring security while unlocking the value of data is essential to the growth and development of the digital economy. As the backbone of the digital economy, data storage is the last line of defense for data security and a vital component of a robust, multilayered defense system.
Huawei OceanStor Dorado All-Flash Storage is one of the most secure foundations for data infrastructure in the digital economic era. It is equipped with comprehensive intrinsic security features and built on a foundation of multilayered security measures that span architecture design, source code, development environment, release, and deployment. The solution significantly enhances data resilience with capabilities such as ransomware protection, breach prevention, data backup and disaster recovery, and trusted data circulation.
