There is no required type of lock or specific way to secure SSI. It must be reasonably secured such that only those covered persons who have a need to know the information can have access to it. Keys should be stored in an alternate location from the SSI.