Computer Center Operations Policy

Version: 1.00Issue Date: 12/23/2014

This Computer Center Operations Policy is intended to ensure that hosting centers meet minimum standards and that physical security, environmental controls, and power backup options are properly implemented to provide proper stability and security.

1.0 Overview

This Computer Center Operations Policy is an internal IT policy which provides standards for hosting computers in organizational operations centers.

2.0 Purpose

This Computer Center Operations Policy provides minimum standards for hosting servers in organizational hosting centers.

3.0 Scope

This Computer Center Operations Policy applies to all hosting centers owned by the organization and those centers leased by the organization. This policy is effective as of the issue date and does not expire unless superceded by another policy.

4.0 Power

  • There must be a secondary power source to the facility such as a diesel generator which can provide power for days or weeks at a time.
  • Power to servers and computer equipment must be conditioned to prevent spikes or brown outs from damaging the equipment.
  • Power to servers and computer equipment must prevent drop outs and UPS systems should provide power to all servers for a minimum of ten minutes.
  • Backup power must be provided to environmental controls to keep the environmental controls functioning as long as servers can function.

5.0 Environment

  • Environmental controls must exist to prevent too high temperature, too high humidity, or too low temperature which is not conducive to the computer equipment in the facility. Temperature and humidity shall be regulated at levels recommended by computer equipment manufacturers.
  • Backup power must keep environmental controls functioning as long as computer equipment remains functioning. Backup power must be provided to environmental fans, heat pumps, compressors, coolant pumps, and any other critical part of the environmental control.

6.0 Backup

  • Equipment must exist at the computer center to provide backup functionality for servers and other computer equipment.
  • Facilities must exist at the computer center to provide storage for backup media which is secure appropriate for the sensitivity levels of data being stored, and is also fireproof.
  • Backup media must also be rotated through another facility in case of total destruction of the computer center.

7.0 Physical Access

  • Access to the facility is only allowed to authorized individuals.
  • All access to the facility must be logged.

8.0 Changes and Additions

  • Changes to equipment and software shall be in accordance with the Change Management Policy.
  • Computer center staff shall ensure that all new and modified equipment has adequate electrical power, rack or floor space, backup (UPS) power, generator power for long term power outtages, environmental controls, data backup and restore procedures, network capacity, and hardware and software maintenance.

9.0 Equipment Maintenance

  • Regular maintenance shall be scheduled for all systems. The business owner shall be informed about times and duration of regular maintenance periods. The business owner shall be informed about unscheduled maintenance as soon as possible or two business days prior.

10.0 Enforcement

Since proper computer center operation is important to maintain security and reliability of systems and data, employees that purposely violate this policy may be subject to disciplinary action up to and including denial of access, legal penalties, and/or dismissal. Any employee aware of any violation of this policy is required to report it to their supervisor or other authorized representative.

Approval

Approved by:__________________________ Signature:_____________________ Date:_______________