How to Protect a Data Center?

The physical security of a data center includes protection of all assets, which includes hardware, software, company data, the property itself, and also employees. Physical security encompasses a wide range of strategies used to prevent outside interference. Examples include burglary, theft, civil unrest, terrorism, natural disasters, or anything that could cause a loss or damage. Physical controls include perimeter monitoring, motion detection, and intrusion alarms.

Physical security for a data center is going to have a few layers that focus on different aspect. The first layer of protection will include perimeter security, focusing on detecting and deterring any unauthorized threats at the perimeter. In case of a breach, facility controls are going to focus on monitoring and protecting the building. Further controls are geared more towards preventing inside threats, assuming an outsider would not likely breach 2 layers of security. These controls would protect the main computer room, requiring biometrics or other form of authorization that ensures no one gets in that is not meant to. Lastly, though a great deal of damage can be done by anyone who has reached this point, many date centers will have cabinet controls as an added layer of authorization.

Physical security assessments should be performed regularly to ensure your data center is protected. This will ensure key areas are monitored and audited vigorously and force you to evaluate topics such as:

• Access controls
• Proximity to high-risk areas using third-party data
• Availability of network carriers
• Likelihood of natural disasters
• CCTV and detection systems
• Security guards
• Maintenance policies
• Fire alarms and combatants
• Utility Redundancy
• HVAC/Venting position and maintenance

Each of these areas, among others, will be explored at a more in-depth level. When evaluating access control, you will look at power supply, does the system have anti-tailgating measures, biometric or ID entry, etc. This data will ultimately let you know your total risk and what areas require the most focus and resources.

Data Center Cabling

Since data center physical security relies so much on keeping everything protected and running, it’s important to call attention to cabling. The physical infrastructure of cabling makes data center networking architecture possible, but also carries a lot or risk when executed incorrectly. Cables can create an unsafe environment for your equipment by restricting airflow to racks, trapping dust, trapping heat, and making it difficult to see how devices are connected without spending a significant period of time. This can cause equipment to overheat and fail, resulting in periods of downtime.

Data center cabling is typically installed beneath an elevated floor or in overhead containers. This keeps cables organized and away from hardware, at least in some capacity, which often helps to reduce energy costs in cooling, prolong equipment life, and maintenance time. Unstructured, data centers may not take as long to implement, but will often lead to higher operational costs down the road.

Tips include:
• Design your cabling infrastructure ahead of time
• Determine cable length prior to installation to reduce excess
• Document installation and utilize color schemes

Risk Assessment Software

Utilizing risk assessment software is vital to ensuring your data centers are protected. Check compliance against relevant regulations and standards, such as ASIS industrial physical security and ISO 27001.

Our platform will allow you to manage multiple assessments concurrently, centrally look at all risks, and report on all data collectively or drill down into individual data sets collected. Members of the team that would perform assessments would not need to be trained on using the platform, only an admin would need to receive training.

Take a free trial and see how you can ensure your data center stays protected.