What is SBU Data?
The purposes of the Computer Security Act included developing standards and guidelines needed to assure the cost-effective security and privacy of sensitive information in Federal computer systems and establishing security plans by all operators of Federal computer systems that contain sensitive information.
How do I store it responsibly and other considerations?
In order to store the data, you need to use data at rest and data in motion technologies which requires an encryption method utilizing PKI (Public key infrastructure). It is important to remember that anytime you store SBU Data, it must be marked as SBU so that individuals having access to the SBU information are aware of its sensitivity and protection requirements and stay in compliance with NPR 1600.1A.
Source: o365_data_guidance_and_encryption_instructions.pdf (nasa.gov)