Access	Secure perimeters, secure entrances, audit trail
Building and site protection	Security fencing, video cameras, movement and intruder detectors, window and door alarms, lightning protectors, good working environment (standard)
Entry	Multiple controlled points of entry
External environment	Minimize external risks
Services	Where possible and justifiable, alternate routes and suppliers for all essential services, including network services
Table E.1 Building/site

Access	Secure perimeters, secure entrances, audit trail
Access	Secure controlled entry, combination lock, swipe card, video camera (if business critical and unattended)
Location	First floor wherever possible, with no water, gas, chemical or fire hazards within the vicinity, above, below or adjacent
Visibility	No signage, no external windows
Shell	External shell: waterproof, airtight, soundproofed, fire-resistant (0.5 hours to 4 hours depending on criticality)
Equipment delivery	Adequate provision should be made for the delivery and positioning of large delicate equipment
Internal floor	Sealed
Separate plant room	Uninterruptible Power Supply (UPS). Electrical supply and switching, air-handling units, dual units and rooms if business critical
External	Generator for major data centres and business-critical systems
Table E.2 Major equipment room

Access	Secure perimeters, secure entrances, audit trail
Access	Secure controlled entry, combination lock, swipe card, video camera (if business critical and unattended)
Temperature	Strict control, 22° (± 3°). Provide for up to 550W/m2. 6° variation throughout the room and a maximum of 6° per hour
Humidity control	Strict control: 50% (± 10%)
Air quality	Positive pressure, filtered intake low gaseous pollution (e.g. sulphur dioxide < 0.14 ppm), dust levels for particles > 1 micron, less than 5 x 106 particles/m3. Auto shut-down on smoke or fire detection
Power	Power Distribution Unit (PDU), with three-phase supply to non-switched boxes, one per piece of equipment, with appropriate rated circuit-breakers for each supply. Alternatively, approved power distribution strips can be used. Balanced three-phase loadings. UPS (online or line interactive with Simple Network Management Protocol (SNMP) Management) to ensure voltage supplied is within ± 5% of rating with minimal impulse, sags, surges and over/under voltage conditions
False floors	Antistatic, liftable floor tiles 600 x 600mm on pedestals, with alternate pedestals screwed to the solid floor. Minimum of 600mm clearance to solid floor. Floor loadings of up to 5kN/m2 with a recommended minimum of 3m between false floor and ceiling
Internal walls	From false floor to ceiling, fire-resistant, but with air flow above and below floor level
Fire detection/prevention	HSSD or VESDA multi-level alarm with auto FM200 (or alternative halon replacement) release on 'double-knock' detection
Environmental detectors	For smoke, temperature, power, humidity, water and intruder with automated alarm capability. Local alarm panels with repeater panels and also remote alarm capability
Lighting	Normal levels of ceiling lighting with emergency lighting on power failure
Power safety	Clean earth should be provided on the PDU and for all equipment. With clearly marked remote power-off buttons on each exit. Dirty power outlets, clearly marked, should also be supplied
Fire extinguishers	Sufficient electrical fire extinguishers with adequate signage and procedures
Vibration	Vibrations should be minimal within the complete area
Electromagnetic interference	Minimal interference should be present (1.5V/m ambient field strength)
Installations	All equipment should be provided and installed by qualified suppliers and installers to appropriate electrical and health and safety standards
Network connections	The equipment space should be flood-wired with adequate capacity for reasonable growth. All cables should be positioned and secured to appropriate cable trays
Disaster recovery	Fully tested recovery plans should be developed for all major data centres including the use of stand-by sites and equipment
Table E.3 Major data centres

Access	Secure perimeters, secure entrances, audit trail
Access	Secure controlled entry, combination lock, swipe card, video camera (if business critical and unattended)
Temperature	Temperature control, 22° (± 5°), preferable
Humidity control	Strict control: 50% (± 10%), preferable
Air quality	Positive pressure, filtered intake low gaseous pollution (e.g. sulphur dioxide s 0.14 ppm), dust levels for particles > 1 micron, less than 5 x 106 particles/m3. Auto shut-down on smoke or fire detection
Power	PDU with three-phase supply to non-switched boxes, one per piece of equipment, with appropriate rated circuit-breakers for each supply. Alternatively, approved power distribution strips can be used. Balanced three-phase loadings. Room UPS to ensure voltage supplied is within ± 5% of rating with minimal impulse, sags, surges and over/under voltage conditions
False floors	Antistatic, liftable floor tiles 600 x 600mm on pedestals, with alternate pedestals screwed to the solid floor. Minimum of 600mm clearance to solid floor. Floor loadings of up to 5kN/m2 with a recommended minimum of 3m between false floor and ceiling
Internal walls	From false floor to ceiling, fire-resistant, but with air flow above and below floor level
Fire detection/prevention	Generally fire detection but not suppression, although HSSD or VESDA mufti-level alarm with auto FM200 (or alternative halon replacement) release on 'double-knock' detection may be included if business-critical systems are contained
Environmental detectors	For smoke, temperature, power, humidity, water and intruder with automated alarm capability
Lighting	Normal levels of ceiling lighting with emergency lighting on power failure
Power safety	Clean earth should be provided on the PDU and for all equipment. With clearly marked remote power-off buttons on each exit. Dirty power outlets, clearly marked, should also be supplied
Fire extinguishers	Sufficient electrical fire extinguishers with adequate signage and procedures
Vibration	Vibrations should be minimal within the complete area
Electromagnetic interference	Minimal interference should be present (1.5V/m ambient field strength)
Installations	All equipment should be provided and installed by qualified suppliers and installers to appropriate electrical and health and safety standards
Network connections	The equipment space should be flood-wired with adequate capacity for reasonable growth. All cables should be positioned and secured to appropriate cable trays
Disaster recovery	Fully tested recovery plans should be developed for all regional data centres, including the use of stand-by sites and equipment where appropriate
Table E.4 Regional data centres and major equipment centres

Access	Secure perimeters, secure entrances, audit trail
Access	Secure controlled entry, by combination lock, swipe card or lock and key. In some cases equipment may be contained in open offices in locked racks or cabinets
Temperature	Normal office environment, but if in closed/locked rooms adequate ventilation should be provided
Humidity control	Normal office environment
Air quality	Normal office environment
Power	Clean power supply with a UPS-supplied power to the complete rack
False floors	Recommended minimum of 3m between floor and ceiling with all cables secured in mufti-compartment trunking
Internal walls	Wherever possible all walls should be fire-resistant
Fire detection/prevention	Normal office smoke/fire detection systems, unless major concentrations of equipment
Environmental detectors	For smoke, power, intruder with audible alarm capability
Lighting	Normal levels of ceiling lighting with emergency lighting on power failure
Power safety	Clean earth should be provided for all equipment. With clearly marked power-off buttons
Fire extinguishers	Sufficient electrical fire extinguishers with adequate signage and procedures
Vibration	Vibrations should be minimal within the complete area
Electromagnetic interference	Minimal interference should be present (1.5V/m ambient field strength)
Installations	All equipment should be provided and installed by qualified suppliers and installers to appropriate electrical and health and safety standards
Network connections	The equipment space should be flood-wired with adequate capacity for reasonable growth. All cables should be positioned and secured to appropriate cable trays
Disaster recovery	Fully tested recovery plans should be developed where appropriate
Table E.5 Server or network equipment rooms

Access	Secure perimeters, secure entrances, audit trail
Access	All offices should have the appropriate secure access depending on the business, the information and the equipment contained within them
Lighting, temperature, humidity	A normal clean, comfortable and tidy office environment, conforming to the and air quality organization's health, safety and environmental requirements
Power	Clean power supply for all computer equipment, with UPS facilities if appropriate
False floors	Preferred if possible, but all cables should be contained within appropriate trunking
Fire detection/prevention and extinguishers	Normal office smoke/fire detection systems and intruder alerting systems, unless there are major concentrations of equipment. Sufficient fire extinguishers of the appropriate type, with adequate signage and procedures
Network connections	The office space should preferably be flood-wired with adequate capacity for reasonable growth. All cables should be positioned and secured to appropriate cable trays. All network equipment should be secured in secure cupboards or cabinets
Disaster recovery	Fully tested recovery plans should be developed where appropriate
Table E.6 Office environments

---