Data Fortress Security and Reliability Features

Security Perimeters

• The basic principle of security operations is multiple concentric security perimeters, or a “defense in depth”.
• Each perimeter of security requires a higher level of authorization than the previous. As the level of security perimeter increases, fewer and fewer employees are allowed access.
• The concentricity of the security perimeters means that the outer perimeters completely envelope and enclose the inner perimeters.
• The building has a 24x7x365 alarm system which includes an interior “glass breakage” alarm. The alarm system is remotely monitored with immediate dispatch in the event of an out-of-normal event.

Personnel Access

• The access to each perimeter is based on RFID’s ( radio frequency identifier) , each of which has a unique address. Only WDF personnel are issued RFID’s. Each use of the RFID is monitored, tracked and if need be, reported. This includes successful uses AND false attempts for each use of the RFID. The RFID’s are controlled by a single point of contact within the company.

Customer’s Personnel

• Customers are issued photo ID access cards, which include information about the individual including their photo, about the specific rack destination where their equipment is housed and information about a reference in that Customer’s organization (usually the individual who has signed the contract). The photo ID is mandatory in order for the Customer to just enter the building. The security ID cards are controlled by a single point of contact.

Escorted Access

• All access to the building and its security perimeters is 100% escorted 24x7x365. The escorts record the particulars of each access visit, prior to entering the equipment area. The escorts are required to carry out a mandatory inspection of the Customer’s access photo ID card. An exact duplicate of the photo ID card is kept in the records for comparison to the Customer’s card.
• Altogether, there are four security perimeters in place. Beyond perimeter 2, all activities are monitored with full time, full motion colour video surveillance. The escorts activate the fourth and final security perimeter that allows the Customer to access their equipment.
• The escorts are technically knowledgeable IT staff, who monitor and / or assist the Customer in their work. Generally, the escorts have a working knowledge or have a working relationship with the authorized Customer’s individuals.

Equipment Protection

• Protection is provided to the Customer’s equipment so that they have uninterrupted operations.

Power Feed

• The power supply provided includes multiple, redundant UPS’s and dual power feeds ( A feed and B feed) to each equipment rack.
• The UPSs are fed by either the local power utility or the on-site diesel generator. The switch over to the generator is controlled by an automatic transfer switch. The diesel startup requires about 8 – 10 seconds to come on-line. Each UPS has a standby capacity of 30 minutes. There is at least 7 days fuel capacity at all times on-site. The fuel quality is routinely checked . The generator is tested weekly for a minimum of 1 hour.
• The power feed and its components are monitored 24x7x365 and any out-of-normal event is tracked and monitored by the on-site alarm system.
• The performance to date (over 30 months of operations) is 100% uptime.

HVAC

• The equipment cooling is provided by telco Central Office standard equipment. It is equipped with dual compressors that ensure continued operation.
• The on-site diesel generating capacity is designed to support, not only the computing equipment load, but also the HVAC power load.
• The raised floor (24 inch) environment ensures the even and proper distribution of cooled air to the equipment racks. Routine temperature inspections are made to identify and mitigate any hot-spots within the equipment area.

Fire Suppression

• Fire suppression is based on an inert dry-gas (Ineregen) system. Unlike Halon, the Inergen gas is environmentally benign. The site operates in 4 separate fire suppression zones.
• In the event of a high temperature event, the system floods the equipment area in alarm mode with the Inergen gas to lower the oxygen level to the point where combustion does not occur. The gas flooding takes about 5 – 6 seconds. This suppresses any fire. The Inergen gas also is designed to continue extracting the heat via the HVAC from the neighbouring equipment to allow uninterrupted operations within the equipment area.
• The high temperature event simultaneously triggers audible and visual alarms.

Network Feed

• The network connections are based on a fibre optic cable system, with physical route diversity, connected to 2 physically separate Points of Presence. The traffic is routed to multiple up-stream backbone carriers to ensure continuous operation.
• It is up to the system administrator at the agency to ensure sound password policies are in effect. Each user has a unique ID that generates an audit trail which can recreate all of their actions in the system during any time period. All changes to the database are recorded in terms of who did them, when and who last modified them and when.

Contact us for more information at info@athenasoftware.net or try our free 30-day trial.