Security control management for information security

An information security method, comprising:

• receiving a data storage request comprising context information associated with storing a data element, wherein the context information identifies:
• a data content type for the data element;
• and
• a target data storage device;
• identifying approved data storage devices within previously stored data storage information corresponding with the data content type for the data element, wherein:
• data storage device information comprising approved data storage devices;
• and
• each approved data storage device is associated with one or more data content types;
• comparing the target data storage device to approved data storage devices corresponding with the data content type for the data element;
• determining the target data storage device does not match an approved data storage device;
• determining a security level associated with the target data storage device, wherein the security level is based on security features associated with the target data storage device;
• determining vulnerability types associated with the determined security level of the target data storage device;
• identifying security controls for the target data storage device based on the determined vulnerability types, wherein:
• each security control is associated with mitigating one or more vulnerability types;
• and
• each security control comprises a hardware configuration for data storage devices;
• and
• applying the identified security controls to the target data storage device to increase a level of information security provided to the target data storage device.

A computer program comprising executable instructions stored in a non-transitory computer readable medium that when executed by a processor causes the processor to:

• receive a data storage request comprising context information associated with storing a data element, wherein the context information identifies:
• a data content type for the data element;
• and
• a target data storage device;
• identify approved data storage devices within previously stored data storage information corresponding with the data content type for the data element, wherein:
• data storage device information comprising approved data storage devices;
• and
• each approved data storage device is associated with one or more data content types;
• compare the target data storage device to approved data storage devices corresponding with the data content type for the data element;
• determine the target data storage device does not match an approved data storage device;
• determine a security level associated with the target data storage device, wherein the security level is based on security features associated with the target data storage device;
• determine vulnerability types associated with the determined security level of the target data storage device;
• identify security controls for the target data storage device based on the determined vulnerability types, wherein:
• each security control is associated with mitigating one or more vulnerability types;
• and
• each security control comprises a hardware configuration for data storage devices;
• and
• apply the identified security controls to the target data storage device to increase a level of information security provided to the target data storage device.