It must contain the following information:
- installation of air conditioning systems that ensure optimal values of temperature and humidity in order for the equipment to operate safely
- use of fireproof materials and installation of fire prevention and extinguishing systems, specially designed to avoid damage to equipment
- proper sizing of the electrical network, depending on the consumption of the equipment used
- ensuring safety against foreseeable failures of utility systems (water, gas, etc.) serving the space hosting the data center
- use of UPS devices and/or power generators to ensure the uninterrupted operation of equipment in case of power outage from the main network; the duration of backup power supply will be calculated according to the estimated time needed to fix possible malfunctions occurring in the main electrical network
- duplication of all elements of the electrical network and ensuring the possibility of automatic switching from the main network to the backup network
- use of work procedures to ensure periodic backup of all information stored in the data center and storage of such information in a different location than the main data center, with the same security conditions as the main space, at a distance from the main space that meets European standards in the field
- ensuring maintenance procedures for equipment and infrastructure, in compliance with the manufacturers’ recommendations, so as to minimize the risk of technical issues
- for critical equipment (whose continuous operation is essential for ensuring the data center’s continuity), backup equipment will be provided, to be used during maintenance operations that require shutdown or disconnection of said equipment, and while the main equipment is affected by technical failures
- the data center must have a scalable structure, both in terms of IT equipment used and infrastructure, in order to maintain system performance at a constant level in the event of new conditions (increasing capacity, new facilities, etc.)
- controlled access to data center equipment used for electronic document archiving, specifying multiple levels of access rights for the personnel operating the systems
- use of special equipment for prevention and detection of physical intrusions
- intrusion detection systems (Intrusion Detection System - IDS)
- firewall (software and/or hardware), routers for traffic filtering
- antivirus systems
- securing authentication and authorization processes for data access
- automatic logging of actions performed in the system
- chronological logging of actions performed in the system (physical access to equipment, system switches, maintenance processes, operator actions, etc.)
- regular evaluation of the data center infrastructure, security system, and IT equipment used, including backup systems
- use of a quality management system
- assessment of the effects of expansions and upgrades
- regular auditing of the security plan
- regular evaluation and training of personnel
- implementation of human resource policies to ensure the data center is operated by specialized personnel holding certifications in the field*