Configuration management is typically divided into two key subsystems: Configuration Identification and Configuration Control.

1. Configuration Identification involves identifying the attributes that define every aspect of a configuration item. A configuration item can be a product, system, software, or a distinct part of these (or a combination thereof). This subsystem includes the selection of configuration items to be controlled, and the documentation of their physical attributes and functional capabilities. It encompasses version control and baselining processes, ensuring that everyone involved has a clear understanding of the system’s current state and its history.

2. Configuration Control revolves around the evaluation, coordination, approval or disapproval, and implementation of changes to configuration items after formal establishment of their configuration identification. It ensures that all proposed changes and design modifications are systematically reviewed, evaluated for their impact on the overall system, and approved before implementation to prevent unauthorized changes from occurring. It also involves the management of change requests and maintaining the integrity and traceability of changes throughout the lifecycle.

These two subsystems work together to ensure that a system’s performance, functional and physical attributes are accurately documented and maintained, and that any changes to the system are controlled and accounted for, improving reliability and quality.

The SMI-S (Storage Management Initiative Specification) standard uses CIM (Common Information Model) over HTTP/HTTPS protocol for communication. CIM is an open standard that defines how managed elements in an IT environment are represented and managed. It allows for the consistent management of these elements, regardless of the manufacturer or provider, facilitating the interoperability of storage devices and systems from different vendors.

Storage administrators take several measures to ensure secure access to storage devices. These measures protect the data from unauthorized access, modification, data breaches, and other security threats. Below are key strategies they employ:

1. User Authentication and Authorization: Administering strict authentication methods for user access, such as two-factor authentication (2FA) or multi-factor authentication (MFA), ensures that only authorized users can access the storage systems. Setting up role-based access controls (RBAC) also allows permissions to be assigned according to the user’s role within the organization, limiting access to sensitive data only to those who need it.

2. Data Encryption: Encrypting data at rest and in transit protects the integrity and confidentiality of the data. Even if the physical security measures fail, and an unauthorized individual gains access to the storage devices, the data will be unreadable without the encryption keys.

3. Regular Security Audits and Compliance Checks: Conducting regular security audits and compliance checks helps identify and mitigate vulnerabilities within the storage infrastructure. It ensures that the storage systems comply with industry standards and regulations, such as GDPR, HIPAA, or PCI DSS, depending on the nature of the data stored.

4. Use of Secure Network Protocols: Implementing secure network protocols such as SSL/TLS for data in transit between storage devices and clients helps prevent eavesdropping and man-in-the-middle attacks.

5. Physical Security: Ensuring physical security controls to protect against unauthorized physical access to storage