Concerned with how virtualized storage is created, allocated and managed. This includes both ""block-based"" storage such as a SAN (Storage Area Network) and ""file-based"" virtualization such as NAS (Network Attached Storage) whether provided by a file server or appliance. Controls at this level assure that the storage is adequate to requirements, properly segregated and secured and that its performance matches the profile specified in the service level agreement.