Critical Facilities Operations Process: Explanations and illustrative examples. For training videos, please visit https://m.youtube.com/channel/UCYw2fG4p7buyhJD0EYHahuQ

1. Coromatic Academy
Open Compute Project, Critical Facilities Operations Framework
Process: Audits and Compliance reviews
Rev 2020-08-04
Information classification: Public

2. Contents
• Process overview
• Lessons learned / customer experiences
• Final notes

3. AUDITS AND COMPLIANCE REVIEWS
OCP Critical Facilities Operations Framework

4. Site Operations
Integration
Terms &
Conditions
OCP CFOPS Delivery model
Incidents
Work Orders & Projects
On-site Access
Service Levels
Organization
KPI Monitoring
& Reporting
Lifecycle &
Financial
Mgmt
On-site
services
Security &
Access
Maintenance
In / outdoor
FM
Site
assistance
Site Inspection
Audits and
Compliance
Site Management
Delivery Support
Service Level
Mgmt
Lifecycle &
Financial
Mgmt
WO & Project
Mgmt
Monitoring &
Reporting
Governance
and BCP
Advisory and
Benchmarking
Supply Chain
and Sourcing
Service Desk
24/7
Incident Mgmt
Team &
Suppliers
Capacity
Mgmt &
Optimization
Document
Mgmt
Compliance
Mgmt
Service
Improvements
Asset List
Border List
Customer
Managed
Operating
Center
Source: OCP CFOPS 2019 v1.4

5. Audits and Compliance reviews
MindMap Overview Process Summary
The aim of audits and compliance reviews is to assure that other
requirements than the formal service levels are not breached. An annual
compliance audit of the sites in scope and their respective process KPIs
should be considered a minimum.
Qualified experts should independently plan, perform and report on findings,
e.g. deviations, risks or potential improvements regarding
• Regulatory matters, e.g. statutory reporting or environmental permits
• Operations Framework or standards the site should meet
The audits and compliance reviews process should be aligned with the
customer to minimize the impact on business operations and to agree
relevant regulations or standards, e.g. this CFOPS Framework, EN 50600, ISO
27001, ISO 9001, ISO 14001, LEEDS, EU Code of Conduct, EED – Energy
Efficiency Directive, UI Operational Sustainability, ISAE 3402, BICSI 009 etc.
Source: OCP CFOPS 2019 v1.4

6. Lessons learned / Customer experiences
“As a Site Owner and colocation operator we are used to handling
many external audits.
Some examples include legal requirement for external audits of the
complete Power Distribution system every ten years and authorities
audits of our fire suppression systems.
Others relate to voluntary standards we follow, e.g. complying with
ISO9001 or being an OCP Ready™ Facility.
On top of this, we also need to accept that several customer audits will
be performed each year. Even if those on-site audits are planned and
performed by our customers, they still take time from our site
engineers to support the auditors...”

7. Final notes
• It should not be confused with the process
“Compliance Management” (that sets the policies and
procedures for compliance)
• The major value of external audits lie in the
independent verification and reporting, but can also be
effective in reducing the time spent on similar audits.
• On-site works should always include updating and
finalizing related documentation and service records

8. Questions?
coromatic.com