Physical and Environmental Security : Basic discussion on Datacenter / server room security and surveillance system

1. Physical & Environmental Security
Presented by
Mohammad Ashfaqur Rahman
Compliance Professional
www.linkedin.com/in/ashfaqsaphal
ashfaq.saphal@gmail.com

2. Objective
●
Crime Prevention
●
Physical Access Controll
●
Video Survillance System
●
Fire Survilance System
●
Air conditioning
●
Electrial Solution
●
Mechanical Practices

3. Physical Security
●
discuss about the threats, vulnerabilities, and
countermeasures that can be utilized to
– physical protect an enterprise’s resources
– and sensitive information.
●
covers designe to deny access to unauthorized personnel
(including attackers) from
– physically accessing a building, facility,
resources, or stored information;
●
and guidance on how to design structures to resist
potentially hostile acts.

4. Threats to Physical Environment
●
Natural environmental threats
– Floods, earthquakes, storms and tornadoes, fires,
extreme temperature conditions, and so forth

5. Threats to Physical Environment
●
Supply system threats
– Power distribution outages,
– communications interruptions,
– and interruption of other natural energy resources
such as water, steam, gas, and so on.

6. Threats to Physical Environment
●
Manmade threats Unauthorized access (both internal and
external)
– explosions, damage by angry employees, employee
errors and accidents, vandalism, fraud, theft

7. Threats to Physical Environment
●
Politically motivated threats
– Strikes, riots, civil disobedience, terrorist attacks,
bombings, and so forth

8. Physical Access Controll
●
Electronic Card
●
Biometric security
●
Access Level

9. Video Survilance
●
CCTV
●
DVR
●
IP Camera
●
Remote Access

10. Fire Survilance
●
Fire
– Cause : heating equipment, electrical panel, broken
ware, electrical extention
●
Fire Alarm System / Survilace System
– Detect fire element, like smoke, heat
– Locate fire ignition point
– Operate fire fighting equipment
– Initiate fire evacuation process and save life

11. HVAC
●
Heating, Ventilating and Air Conditioning
– Upflow , downflow and inrow
– Air volume cubic feet per
– minute (CFM) per ton.
– Humidity control (RH 45% - 60%).
– Temperature control (72°F ± 2°F).
– Air Filters.
– Positive air pressure.
– Protected intake vents.
– Alarms: Leak detection, loss of power,
– temperature, humidity, fire, smoke detector.

12. HVAC

13. Crime Prevention
●
Natural Access Control
– Terrain
• Distance from fenced
boundary to building.
• Distance to adjacent
building or structure.
• Roadway and paths to
building(s).
– Landscaping
• Spiny shrubs and/or trees
• Grass, sod or gravel traps
• Water (i.e. drainage pond,
lake or stream)

14. Crime Prevention
●
Natural Surveillance
– personnel walkways
– activity areas in ways that maximize visibility
●
Make employees feel safe and intruders feel
uncomfortable

15. Crime Prevention
●
Territorial Reinforcement
– Physical designs that emphasize or extend the
company’s physical sphere of influence so that
legitimate users feel a sense of ownership of that
space
– Use walls, fences, flags, etc.
– Create a sense of dedicated community

16. Crime Prevention
●
Territorial Reinforcement
– Physical designs that emphasize or extend the
company’s physical sphere of influence so that
legitimate users feel a sense of ownership of that
space
– Use walls, fences, flags, etc.
– Create a sense of dedicated community

17. Data Center tier
●
Tier 1 = Non-redundant capacity components (single
uplink and servers).
●
Tier 2 = Tier 1 + Redundant capacity components.
●
Tier 3 = Tier 1 + Tier 2 + Dual-powered equipments and
multiple uplinks.
●
Tier 4 = Tier 1 + Tier 2 + Tier 3 + all components are
fully fault-tolerant including uplinks, storage, chillers,
HVAC systems, servers etc. Everything is dual-powered.
Ref : www.adc.com/Library/Literature/102264AE.pdf

18. Data Center tier

19. Where are we ?