Client Server Server Room Risk

4,019 views

Published on

Published in: Technology, Business
0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
4,019
On SlideShare
0
From Embeds
0
Number of Embeds
28
Actions
Shares
0
Downloads
122
Comments
0
Likes
1
Embeds 0
No embeds

No notes for slide

Client Server Server Room Risk

  1. 1. Data Networking Year 2 Client Server Networks Minimising Server Room Risk Colm Bennett
  2. 2. Server Room Security - Why? <ul><li>Business more and more dependent on IT </li></ul><ul><li>IT risk more closely aligned to Business Risk </li></ul><ul><li>Client – Server approach centralises IT risk </li></ul><ul><li>Makes catastrophic/systemic failure more likely </li></ul><ul><li>But also makes IT risk more controllable </li></ul><ul><ul><li>Central location </li></ul></ul><ul><ul><li>Concentrated IT resources </li></ul></ul><ul><li>Server Room security aims to minimise IT risk associated with centralised server </li></ul>
  3. 3. Key Risk Areas? <ul><li>What are the main risks area for a server room? </li></ul><ul><li>Not just physical security – anything that could cause loss of service </li></ul><ul><li>You Tell Me.... </li></ul>
  4. 4. Risk Areas <ul><li>Human – Theft, sabotage, accident etc </li></ul><ul><li>Fire – accident, deliberate, overheating, electrical </li></ul><ul><li>Water – flooding, burst pipes etc </li></ul><ul><li>Electrical – surge, power cut </li></ul><ul><li>Temperature – over heating, AC failure </li></ul><ul><li>Geographical Location – earthquake, hurricane, flooding etc. </li></ul>
  5. 5. Designing to Minimise Risk - Location <ul><li>Few doors as possible </li></ul><ul><li>Fire rated doors </li></ul><ul><li>Centre of building </li></ul><ul><ul><li>Easier to control temp (windows) </li></ul></ul><ul><ul><li>More secure </li></ul></ul><ul><li>Walls extend up through any false floors/ceilings </li></ul><ul><li>Not on top floor (heat) or basement (flooding) </li></ul><ul><li>Away from water pipes, toilets etc </li></ul>
  6. 6. Designing to Minimise Risk – Air Con <ul><li>Air Con system to maintain tempature </li></ul><ul><li>All ducts kept clear of dust etc </li></ul><ul><ul><li>Nothing blocking ducts </li></ul></ul><ul><li>Tempature monitors on key servers </li></ul><ul><ul><li>SMS alerts </li></ul></ul><ul><li>AC units regularly maintained, possibly duped </li></ul>
  7. 7. Designing to Minimise Risk - Power <ul><li>Estimate and plan for power consumption </li></ul><ul><ul><li>Google datacenter beside dam </li></ul></ul><ul><li>Install power surge equipment </li></ul><ul><li>Install UPS with alerts, auto shutdown </li></ul><ul><li>Possibly generators </li></ul>
  8. 8. Designing to Minimise Risk - Security <ul><li>At least regular locks </li></ul><ul><li>Ideally biometric </li></ul><ul><li>Camera surveillance (e.g. IP Cameras) </li></ul><ul><li>Motion sersors </li></ul><ul><li>Locked cabinets – glass break sensors </li></ul>
  9. 9. Designing to Minimise Risk - Building/Construction <ul><li>Dectors wired in </li></ul><ul><li>Racks raised off the ground </li></ul><ul><li>Non liquid fire suppressant systems </li></ul>
  10. 10. Designing to Minimise Risk - Layout <ul><li>Well laid out server room </li></ul><ul><ul><li>Less likelyhood of human error </li></ul></ul><ul><li>Culture of tidyness is important </li></ul><ul><li>Patch Panel slopiness leads to mistakes </li></ul>
  11. 11. Designing to Minimise Risk – Audit Risk <ul><li>Written secuity polciy </li></ul><ul><li>Regular auditing </li></ul><ul><li>Both to check current measures are really working and to review any new risks </li></ul>

×