Advertorial: Anixter
Data center
risk management
Infrastructure as a Platform by Anixter.
Big data. Big risks.
B
Risk
ig data—whether
Management
from mobile phones
or Internet-enabled
devices—is changing the
way companies operate
and can be essential in
making critical day-to-day decisions.
However, data breaches are occurring
more frequently and the media
outlets are taking notice. This could
create undesirable exposure and raise
concerns with your valued customers.
Safeguarding big data is necessary to
business operations, continuity and, in
extreme cases, national security.
Even though most attention on
safeguarding data is centered on logical
security, the risk of not implementing
a solid physical security plan can
increase exposure, and in many cases,
governments and industry associations
are mandating that data centers meet
certain physical security requirements
to protect against these risks.
As such, there are ways to protect a
data center from a physical intrusion.
But to do so, it’s important to
understand:
•T he reasons for implementing a
physical security risk management plan
Advertorial: Anixter
• The risk in the physical environment
•T he current industry standards
associated with physical security.
Benefits of a Physical Security
Risk Management Plan:
Implementing a risk management plan
can help you:
• Protect the company’s image
•A chieve regulatory compliance
(HIPAA, PCI-DSS, SOX, GLB)
•B alance investment in both physical
and logical security
•S tay one step ahead of adversaries
with technology
•E xecute policies and procedures
specific to the data center
•M inimize disruption to business
operations and continuity.
Risks in the Physical
Environment: Assessment
and Management
Assessing risk in the data center
requires an understanding of where
and how data center breaches usually
occur and that internal threats are
often greater than external ones.
Within an organization, assessing
risk usually differs from the Chief
Information Security Officer (CISO)
to the facility manager. Many times,
it’s not entirely clear who owns the
physical security budget—IT or
facilities—or even how much to budget
for physical security. As organizations
continue to align IT and physical
security, they will need to address how
to incorporate physical and logical
security to minimize these damages.
It’s important to follow basic
risk management philosophies:
•R  each an agreement on
balancing physical and logical
security budgets
• I dentify threats, including ones
from the inside and outside
•M  aintain sound policies and
procedures and implement
them consistently
Current Standards:
Bench Marking Physical Security
Creating and executing a risk
management strategy isn’t just good
internal policy, it’s increasingly
becoming a requirement for both
industry and governments. Important
industry standards:
• SSAE 16
• PCI DSS
• HIPPA and HITECH
• Gramm-Leach-Bliley Act
• ANSI/BICSI (002-1014: Data Center
Design & Implementation Best Practices)
•T IA 942-A: Telecommunications
Infrastructure Standard for Data Centers
Another related issue is how sites
are audited and the inconsistency
in format, documentation and
action planning.
Implementing Your
Physical Security Plan
Data center operators need to
implement plans that successfully
manage the risk associated with
hosting this data. By implementing
several layers of protection, data
centers can best protect themselves
from physical threats. In the next
article, Anixter will cover these
strategies and the best practices for
implementing them.
Next issue:
Managing risk with a layered
security approach
Contact Details
Phone: 1-800-ANIXTER
anixter.com/datacenterdcd