The following Tier Myth and Misconception, published on 29 October 2009, addresses the commonly held belief that Tier dictates infrastructure physical security. Tier requirements address the functionality of the data center design topology; Operational Sustainability addresses the risk factors beyond design topology, including infrastructure physical security.
Myth: Re-enforced perimeter fencing is required for Tiers III and IV.
Myth: Physical security measures for outdoor critical equipment (e.g., fuel storage tanks) are a Tier requirement.
Myth: CCTV is required for Tiers III and IV.
Uptime: The Tier Classification System does not prescribe security provisions. Nevertheless, these infrastructure physical security risk factors should be specifically and thoroughly addressed in the owner’s Operational Sustainability requirements.
The level of security is largely determined by industry, the criticality of the IT function performed on site, and the owner’s policies. For example, a financial institution will typically invest in a level of security exceeding that of an academic institution.
There are numerous infrastructure physical security measures which are best practices, regardless of Tier. These include biometric readers, bollards, guard houses, hiding in plain sight, mantraps, re-enforced perimeter fencing, video surveillance, etc. Best practices are critical in reducing the risk exposure of curiosity, mischief, crimes, and accidents. However, best practices should not be confused with Tier requirements.
In order to maintain focus on the Tier requirements, the Uptime Institute has published Tier Standard: Topology, which places the Tiers in a standards format to facilitate practical application. This document puts aside the attributes and illustrations that can lead to confusion. Tier Standard: Topology is available for download HERE.
If you would like more information on Tier Certification, please click HERE. |