Cigent SSD ICS is a hardware-based secure storage solution designed to protect data at rest on Industrial Control Systems (ICS) and Operational Technology (OT) environments. It combines hardware full-drive encryption (HWFDE) with Pre-Boot Authentication (PBA) and software full-drive encryption (FDE) to provide a dual-layer encryption architecture aligned with NSA CSfC Data-at-Rest (DAR) requirements. Key capabilities include: - Hardware Full Drive Encryption (HWFDE) paired with Pre-Boot Authentication (PBA) as an outer encryption layer, with optional software FDE as an inner layer for CSfC DAR dual-layer compliance - Hidden partitions that remain invisible at the sector level and require independent authentication, protecting against physical compromise, cloning, and forensic analysis - Firmware-level cloning and wiping prevention, ensuring data remains locked without proper authentication - Verified data erasure via a patented firmware-level block-by-block analysis confirming irreversible data destruction through crypto and block erasure, locally, remotely, or via automated policy triggers - Tamper-proof, encrypted audit logs capturing all data access events and transactions, including attempts to boot from external media, supporting insider threat detection and forensic analysis - Enterprise administration via a CLI utility (Windows and Linux) and a management console supporting on-premises or cloud-based deployment, key handling, policy configuration, compliance reporting, and automated deployment The solution is available in M.2 2230 SSD and BGA SSD form factors, supporting up to eight separate hidden partitions. It has been tested and validated by MITRE, NIST, NSA, NIAP, and the US Air Force, and is deployed across US intelligence agencies and defense organizations.