Data Center Checklist [PDF]

Zitiervorschau

Sl. No.

1 2 3 4 5 6 7 8

1 2

3 4 5 6 7 8

Audit Questionnaire Document Available Comments Physical Security Do you have policy that addresses the physical security of the Dta Center? Do you maintain register for entry/exit to data center? Is it records the purpose to visit the data center? Do you have electronics access control mechanism for entry/exit to the data center? Do you take access control review, at what frequency? Do you allow the temporary access to data center? Is it recorded? Do you remove the temporary access as soon a What process is followed if any new person visit the data center? Do you escort the person visiting data center? Do you have control on door automatic lock? Security camera has been intalled to monitor the data center? Check for No. of Security cameras Monitored By: Recording Period Recording Media Retention Period Administered By

Environmental and Electric Control Does data center has an adequate and safe fire-suppression system with associated detectors (Heat, Smoke and te When was it last tested? Smoke alarms - Test Report Temperature Monitoring System - Test Report Fire Extinguisher - Check expiry date Fire control system - Test report Does the data centere have redundant cooling system? Do you standard checklist for testing? Is the procedure documented? Do you have UPS system to backup your data center electricity? Do you have updated details on current electric load capacity of data center? What is the backup capacity of UPS system? When was the last UPS system tested? (report)

Change Management 1 Do you have change management policy? Is it addresses the process to be followed for changes in data center? 2 Do the changes in data center documented? 3 What is the revie mechanism for change management?

1 2 3 4 5

Inventory Control Do you maintain the inventory of assests in data center? Is the iventory of assests in data center are up to datE? Do you review asset inventory in data center? At what frequency Are all the assets in data center are properly labeled? Do you hae contact details of vendor for relevant systems in data center in case of emergency?

1 2 3 4 5 6 7

Incident Management Does your company have an incident management policy? What methodologies are being adopted for incident management? Are management responsibilities and procedures established to ensure quick, effective and orderly reponse to inf Are the roles and responsibilities defined for incident management? Are the incidents documented and reported? Route cause analysis done to avoid the same? Do you have emergency procedures for instructions for shutting off utilities instructions for powering down equipment instructions for activating/deactivating fire suppresion equipment personal evacuation

he data center?

mporary access as soon as work gets completed? on visiting data center?

ctors (Heat, Smoke and temperature monitor)?

hanges in data center?

nd orderly reponse to information security incidents?