Abstract: A data storage security system includes an end-user device and a transitory R/W storage unit conditionally connected to the outside world via a first air gap or to an offline storage system via a second air gap. The system includes a process control unit that controls all data cycles according to a predefined schedule and is equipped with tamper-responsive and tamper-resistant properties to protect against unauthorized access. A plurality of “n” cold data storage units that are never directly connected to the outside world and are protected from unauthorized access, and an immutable PLC switch that connects the cold data storage units to the data unit and the second air gap to the transitory R/W storage unit. The system provides unidirectional data transfer from the outside world to the offline storage system, and system status communication and monitoring through communication isolation element connections to prevent external tampering.