Defence in depth.
WHAT THE LAYERS ARE
- The perimeter: fencing, barriers, lighting
- The building entrance: reception, verification
- Internal zones: restricted to authorised areas
- The data hall: further restricted
- The rack or cage: locked, individually
WHY LAYERS
Each must be defeated in turn, and each provides an opportunity to detect.
WHAT THE PERIMETER DOES
Deters, delays, and defines where authorisation begins.
WHAT RECEPTION DOES
Verifies identity and purpose before entry.
WHAT INTERNAL CONTROL DOES
Limits people to areas relevant to their purpose.
WHY RACK-LEVEL LOCKING MATTERS
In a shared facility, other customers' staff are in the same hall.
WHAT TO ASK ABOUT ANY FACILITY
How many layers exist How access is granted and revoked Whether visitors are escorted Whether access is logged and reviewed
WHAT TO CHECK
Whether the procedures are actually followed.
HOW
Observe what happens when you arrive.
