R&M Data Center Handbook

www.datacenter.rdm.com
3.2.3. Security Zones
Information technology security is a broad term which includes logical data security, physical system security, and
organizational process security. The goal of a comprehensive security concept is to examine all areas, detect and
assess risks early on and take measures so that a company’s competitive ability on the market is not at risk.
When a company’s IT infrastructure and different IT functional areas are taken into consideration, a well thoughtout
design can reduce or even eliminate significant physical security risks. Both the locations of IT areas and the
spatial assignment of different functions together play a decisive role in this process.
Functional Areas
Designing an IT infrastructure and therefore selecting the location of a data center are based on a company’s
specific data security concept, which reflects its requirements of availability and the direction of corporate policy.
The following criteria should be examined when considering the physical security of a data center location:
• Low potential of danger through neighboring uses, adjacent areas or functions
• Avoidance of risks through media and supply lines, tremors, chemicals, etc. which may impair the physical
security of IT systems
• Prevention of possible dangers through natural hazards (water, storms, lightning, earthquakes) – assessment
of the characteristics of a region
• The data center as a separate, independent functional area
• Protection from sabotage via a “protected” location
• An assessment of the danger potential that is based on the social position of the company
If all risk factors and basic company-specific conditions are taken into consideration, not only can dangers be
eliminated in advance during the conception process for the IT infrastructure, but expenditures and costs can also
be avoided.
When designing and planning a data center, its different functional areas are arranged in accordance with their
requirements for security and their importance to the data center’s functional IT integrity.
The different functional areas can be divided up as follows:
Security Zones
Function
1 Site white
2
3
4
5
Semi-public area, adjacent
office spaces
Operating areas, auxiliary
rooms for IT
Technical systems for IT
operation
IT and network
infrastructure
Marking
(example)
green
yellow
blue
red
Arrangement of Security Zones
The image above is one example that results when different security zones are shown schematically: The IT area
(red) is located on the inside and is protected by its adjacent zones 3 and 4 (yellow/blue). Security zones 1 and 2
(white/green) form the outer layer.
Separating functional areas provides for limited possibilities for accessing sensitive areas, so possible sabotage is
prevented. This ensures, for example, that a maintenance technician for air conditioning systems or the UPS only
has access to the technical areas (blue) of the company and not to the IT area (red).
The locations of the different functional areas as well as the division of security zones, or security lines, are key to
ensuring the security of the IT infrastructure. However, continuous IT availability can be realized only within the
overall context of a comprehensive security concept that considers all IT security areas.
R&M Data Center Handbook V2.0 © 08/2011 Reichle & De-Massari AG Page 53 of 156