DATA CENTER AUDIT'S
The Data Center is an integral part of an organization's IT infrastructure. As a matter of fact, the IT Data Center hosts all IT infrastructures and supporting equipment. To ensure the security, effectiveness and efficiency of an IT Data Center, periodic security assessment or inspection, in the form of audit is required to provide reasonable assurance to stakeholders and management that their investment in physical IT hardware and supporting equipment such as power, cooling, environmental, safety and security equipment/devices are reasonably protected and functioning optimally.
Audit Objectives
The objective of the exercise is to evaluate the adequacy, effectiveness and efficiency of controls in place to minimize the risk of unauthorized access to the data center, business disruptions, theft of information assets, safety, emergency and environmental hazards.
Audit Objectives
• Personnel procedures and responsibilities addressing employee termination, cross-functional and systems training.
• Backup procedures are adequate to minimize business interruption and protect against loss of data in the event of a disaster.
• Physical security controls are adequate to prevent unauthorized access to data center areas (server, power and communication rooms)
• Environmental controls are adequate to minimize hardware/software losses from fire or flood.
• Safety and emergency procedures are adequacy enough to ensure protection of equipment and human live from damage/jeopardy.
• Power system adequacy and redundancy (alternative power sources and uninterrupted power supply) – STS technology.
