Archive for the ‘TIA 942 Compliant Data Center’ Category
PC World — On Monday, we polled IT and business leaders about how they’re using public and private clouds. The respondents to our pair of suveys who say they are well on the way to a completely virtual data center outnumber those who haven’t started using the cloud at all.
Nearly one-quarter of respondents to each of our two polls–one for IT managers and another for business managers–said they’re on the way to a virtualized data center. Only 17 percent of people who took either poll said they’re not using the cloud at all. The remainder have some sort of cloud initiative in place, either public or private.
Based on these results, small businesses seem to be buying into the notion of the cloud, but taking extra precautions against data loss. A spring survey by In-Stat shows that even when SMBs are buying cloud storage, they are also buying NAS systems for internal use to back up the online storage.
More of the CIO.com article from Logan G Harbaugh
Is data center compliance costing you? How much is your organization spending in time and money to meet the data center certification and data center compliance requirements?
Data center compliance requirements are increasing. Federal and state requirements are on the rise. Organizations are now faced with clients and vendors who require data center compliance.
Physical compliance can often be the most capital intensive and expensive. Data center security and certification requirements can make outsource colocation facilities more cost effective than doing it in-house .
Colocation facilities focus on many certifications and compliance requirements. Here are a few:
SAS-70 data center compliance
HIPAA
FDA
PCI
FISMA
Sarbanes-Oxley
TIA-942 compliant data center
Do the math. Does it make sense for an outsource computer room to do the compliance and certification work for you?
Your high-tech landlord – Is affordable colocation your company’s most important real estate?
Your data center is probably more important to your business than it was 10 years ago. Organizations of all sizes have come to expect 99.995% uptime (the same level as a Tier IV data center) to keep revenues flowing and to retain customers, and to communicate with key vendors.
But it is shockingly expensive to build an enterprise data center with such requirements. Some of the requirements to meet such high levels of uptime include:
- Hardened data center facilities: In Midwest data centers, F5 tornado resistant data centers are important.
- Data center power redundancy: Can you afford two utility feeds, two generators, and two UPS systems?
- Data center cooling redundancy: You’ll need at least two air conditioning systems with double the air conditioning your require.
- Data center compliance and certifications: Vendors, clients and the government are requiring expensive certifications such as SAS 70 certified data centers and TIA 942 compliant data centers.
- Security: Physical data center security includes the costs, implementation and maintenance of access cards, PIN pads, locking cabinets, and security cameras with staffing to monitor them.
Some companies choose to “get out of the hardware business” and move their critical applications to cloud service providers like Rackspace and Amazon. Many find that the cost of such a move can be expensive, variable, and hard to forecast.
Other companies choose the high-tech landlord route. They search for an outsource data center with key features:
Experience – Companies are choosing outsource colocation facilities that have a track record
Leadership – Are the owners involved in day-to-day operations?
Carrier neutral data center – Multiple telecom providers are available
No cross-connect fees – No monthly fees to remain connected to the telecom carriers
Simple data center pricing model – Easy to understand and easy to forecast
Ability to grow and change – Can you get extra space if you need it?
Do you have the IT expertise you need to make your business successful? Do you need a venue to deliver your mission critical applications? If the answer is yes, contact a high-tech landlord to find out more.
Why might Midwest colocation may be your best choice?
- Low data center power costs
- Low costs of construction
- Great access from the rest of the country
Why might Indianapolis be your best choice for your colocation provider?
- Dense concentration of telecommunications fiber
- Low data center power costs
- Strong pool of talented information technology professionals from Purdue, IU and Rose-Hulman
- Vibrant, easy to access technology community
Why might Lifeline Data Centers be your best choice for a Midwest data center provider?
- Ten years of history delivering affordable colocation with 99.995% uptime
- Privately held and owner-operated by veteran IT professionals
- Fifteen carriers with no monthly cross-connect fees
- SAS 70, TIA 942, HIPAA, FISMA, NIST, PCI, FDA compliant
- N+N redundant architecture (equivalent to a Tier IV data center)- better design means less downtime
- Private cages or shared space
- Secure office space on a 41 acre campus
- 10,000 square feet available
Want to know more? Call Lifeline at 317.423.2591
Can you simplify your computer room with wholesale data center facilities?
First, what are the benefits of reducing complexity?
- Less labor required for managing IT and the data center
- Better reliability; less data center downtime
- Faster time to resolution when problems arise
- Better focus on the business issues that IT supports, rather than equipment, facilities and compliance
- Removal of the barriers to growth and change in the business and in the IT that supports the business.
The complexity of your computer room is largely dependent on the level of computer system reliability that your company requires. This reliability is known as data center uptime. For this post, we’ll assume that your business requires 99.995% uptime, which is 28 minutes of downtime per year or less. This is the same level that Tier IV data centers promise to deliver. Why so high? Because data center downtime can mean lost revenues, lost profits, and lost clients.
How complex is your data center? There are three broad categories of complexity: information technology, facilities, and compliance.
The complexity of your information technology includes:
- Servers
- Storage
- Switches
- Firewalls
- Security appliances
- Monitoring devices
- Virtualization software
- Operatiing systems
- Business applications
The complexities of the information technology alone can be daunting. Since the business applications are what drives all the other information technology components, business applications will be the first factor in determining the level of complexity. More applications mean more complexity. Interdependence of applications means more complexity. Data interchange with clients and vendors adds complexity.
When high reliability (the goal of zero downtime data center downtime) is important, things get even more complex. High data center uptime requires dual power supplies on IT equipment, and duplicate equipment for the most important servers, storage units and network devices. This duplication is known as data center redundancy, and it requires more management, maintenance, capital and operating expense than a less reliable approach.
On the data center facilities side, the complexities include:
- Hardened data center buildings (F5 tornado resistant data centers in Midwest data centers)
- Data center power redundancy (two power feeds, two generators and two UPS systems supporting IT equipment
- Data center cooling redundancy
- Fire suppression
- Physical security
Again, higher data center uptime requires more complexity. N+N data center redundancy (two of everything) is the best way to minimize downtime. That means two utility feeds , two generators, two UPS systems and two power paths to all IT equipment . Two air conditioning systems reduces the risk of downtime due to cooling failures, one of the most common causes of downtime in computer rooms. Fire suppression for computer rooms needs to be different than standard fire protection. And physical security can be very complex to administer.
This N+N data center redundancy reduces downtime but greatly increases complexity and costs. Data center capital costs can easily reach $500,000 or more when building an in-house N+N redundant data center. The complexity of owning and managing a data center can be even more daunting that the complexities of the information technology in the data center.
On the compliance side, more regulations are coming as the government seeks to legislate privacy and security in certain industries. The most regulated industries are:
- Financial services
- Credit card handling
- Health care
- Utilities
- Government data
- Life sciences
But these industries are not the only ones requiring data center certifications and compliance. Clients and vendors are requiring SAS 70 certified data centers and TIA 942 compliant data centers. Obtaining certifications and meeting regulatory compliance requirements can add complexity, cost, and additional in-house labor burden.
How does a wholesale data center facility reduce the complexity? With the right wholesale data center, you can outsource the facilities and compliance complexities. Most companies don’t have in-house expertise in power, cooling, sturdy buildings, fire suppression and physical security. handing over these disciplines to data center professionals simplifies the data center and reduces complexity. Many companies are required to maintain levels of data center compliance and certification. The cost of a SAS 70 certification alone can range from $20,000 to $50,000 initially and $20,000 per bi-annual audit. Outsource data centers can also provide information technology support to assist or replace in-house staff.
What’s the benefit of outsource data center? Your IT staff can stop worrying about facilities and compliance problems, and focus on business applications and the information technology to support them.
Looking for a simple data center solution? Call Midwest colocation provider Lifeline Data Centers at 317.423.2591.
Why are companies moving primary data centers to wholesale colocation facilities like Lifeline Data Centers? The nine reasons outlined in the paragraphs above were:
• Reaching limits on power, cooling, or floor space
• Improving primary data center uptime (reliability)
• Meeting data center compliance or data center certification requirements
• Consolidating data centers
• Moving out of an existing building; moving a data center
• Reducing power costs
• Swapping primary data center and disaster recovery center sites
• Centralizing the hub of a wide area network
Selecting the right wholesale data center is one of the most critical strategic IT decisions a company will make. A sensible CIO strategy would include these data center requirements:
• Industry veteran data center leadership, directly involved in day-to-day operations
• True N+N data center redundancy with 99.995% uptime (Tier IV data center uptime levels)
• Data center certifications – SAS 70 data center, TIA 942 compliant data center, and industry-specific compliance
• Highly-customized data center consulting and managed services
• Simple data center pricing model
• Low data center power costs, billed on usage
• Private cages for security, high density and long-term growth
• Access to multiple telecommunications providers
• Carrier neutral data center with no cross connect fees
The primary data center is the heartbeat of a company. The wrong decision on data center providers can cost a company dearly for the life of a contract. Choose a wholesale hardened data center facility that works to support the company’s specific data center requirements. Consider affordable colocation options. Consider Midwest colocation provider Lifeline Data Centers.
Why are companies moving primary data centers to wholesale colocation facilities like Lifeline Data Centers? More companies are using outsource data centers to meet data center certification and data center compliance requirements.
There are dozens of data center certifications. Popular data center certifications include SAS 70 Type II, TIA-942 compliant data centers, and Uptime Institute Tier IV data center ratings.
SAS 70 certified data centers define a set of controls and commit to adhere to those controls. Some call that the fox guarding the hen house. SAS 70 Type II data centers audit the adherence to these controls using a third party auditor. SAS 70 is being replaced by a new standard, SSAE 16.
TIA-942 was designed by the Telecom Industry Association. It is a granular look at the design and implementation of a data center or telecom facility. TIA 942 compliant data centers offer high levels of uptime. With data centers, redundancy is a good thing. N+N data center redundancy is sought by most companies, because it translates to a higher level of data center uptime. Redundancy refers to the existence backup system for every important system, including redundant utility feeds, redundant generators, redundant UPS systems, redundant data center cooling, and redundant telecommunications. Two of everything is expensive, but it’s the only way to guarantee high levels of uptime.
The Uptime Institute tiering system is probably the most talked about certification, though few data centers carry the actual certification. The tiering system rates data centers based how they are designed, focusing on the power architecture and other features inside the four walls of the data center. Tier IV data centers are designed to deliver 99.995% uptime. The benefit of these redundancy certifications is that they help companies evaluate providers’ relative levels of uptime with the theoretical goal of a zero downtime data center. Companies that are shopping for outsource data center may choose to combine certification requirements with a “see for yourself” approach to the outsource computer room’s N+N data center redundancy.
Data center compliance is about passing audits. Common audits in the data center include HIPAA, Sarbanes Oxley, FDA, FISMA, NIST, and PCI. Wholesale colocation providers should meet a company’s industry, government, vendor and client compliance requirements. A good provider will come to the table with the company when an audit is taking place. This doesn’t take the compliance burden away from a company; it allows the company to address the physical security and compliance problems by handing them off to the wholesale data center.
Why are companies moving primary data centers to wholesale colocation facilities? Outsource data centers offer a way to “buy” data center certifications and compliance. Companies can avoid the incremental FTE burden of data center compliance issues. And the right data center provider will act as a trusted agent of the company when the auditors come to call.
In Part 5 of this series, we’ll address how wholesale colocation can solve data center consolidation challenges.
Data center compliance and data center certifications at Lifeline Data Centers
Companies that are considering Lifeline Data Centers for their outsource data center needs often ask about our expertise with data center compliance. We are also asked about data our center certifications.
Rich Banta, co-owner of Lifeline Data Centers, holds the following certifications, which are from ISACA, the Information Systems Audit and Control Association.
CISA – Certified Information Systems Auditor. The CISA certification is known worldwide as the recognized achievement for those who control, monitor and assess an organization’s information technology and business systems.
CRISC – Certified in Risk and Information Systems Control. CRISC (pronounced “see-risk”) is designed for IT professionals who have hands-on experience with risk identification, assessment and evaluation; risk response; risk monitoring; IS control design and implementation; and IS control monitoring and maintenance.
Lifeline builds to the TIA 942 compliant data center standard. In our opinion, TIA 942 offers a more granular level of detail that the Uptime Institute Tier IV data center standard. Lifeline uses an N+N data center redundancy model which allows us to deliver 99.995% uptime or better. Lifeline has provided a zero downtime data center over the last five years.
Lifeline Data Centers is also a SAS 70 data center. Lifeline has a SAS 70 Type II certification.
Lifeline routinely passes HIPAA, FDA, FISMA, NIST, SOX, and PCI audits.
Need more info? Call Lifeline Data Centers at 317.423.2591.
How do you pick the right wholesale colocation vendor?
First, consider your strengths as a business. In what markets do you operate? How have you been successful? Where is your talent? What products and services net you the most profit? How does the IT organization and the enterprise data center support these strengths, both directly and indirectly?
Second, consider the regulatory compliance that the government, your clients, and your vendors expect from your business. Are you or your clients regulated by HIPAA, FISMA, NIST, Sarbanes Oxley, or the FDA? Do your vendors or clients expect SAS 70 data center certifications and TIA 942 compliant data centers? Is there a likelihood that the markets in which you operate will be regulated in the future?
Third, consider your uptime requirements. Tier IV data center facilities offer 99.995% uptime or better. That’s 28 minutes of downtime per year or less. If you ask your clients, they probably think a zero downtime data center is what you should provide. What are your organizational expectations for downtime due to data center facilities?
Fourth, consider your telecommunications needs. Do you need multiple carriers? Does the outsource data center charge monthly cross connect fees? Is the provider carrier neutral?
Finally, evaluate alternative vendors.
If your IT organization is well-aligned with the business, wholesale colocation makes sense. If you plan to own hardware and employ IT staff or IT service providers that you trust, wholesale colocation is a perfect fit.
Data center compliance and data center certifications vary among outsource computer room providers. Compliance issues are driving more companies to wholesale colocation facilities with data center regulatory compliance. Providers who carry data center certifications can further reduce the costs of compliance .
Uptime is a major differentiator when it comes to vendors. Data center power redundancy varies among providers. Two of everything (N+N data center redundancy) is the exception, not the rule. Make sure you clearly understand the data center power redundancy, data center cooling redundancy , and telecom infrastructure. If it looks like a single point of failure, it probably is. Hardened data center facilities are just as important, depending on your region and the associated risks. F5 tornado resistant data centers are critical for Midwest colocation facilities.
Data center pricing models vary. Make sure you understand how power, cooling and space allotments are billed. Watch for add-on fees, port charges, and other monthly mystery fees. Affordable colocation exists, and colocation pricing models can greatly affect long-term costs.
Carrier neutral data centers offer the most telecom flexibility. Carrier neutral data centers with no cross connect fees can reduce costs.
Lifeline Data Centers provides 99.995% uptime wholesale data center facilities to companies who need high uptime, flexibility and options. Lifeline is a carrier neutral data center with 15 providers and no monthly cross connect fees. Call Lifeline at 317.423.2591 to learn more about Lifeline’s wholesale colocation and office space solutions.
Data center certifications are driving more companies to outsource data centers.
Federal, state and local requirements on a company’s data center are on the increase. Companies that store personal data on their clients and employees have to spend more time, money and resources on keeping that personal data safe. Requirements include multiple levels of physical security, such as physical separation, PINs and other personal ID-based access, and detailed audit trails. Maintaining data center compliance can cost a medium size company hundreds of thousands of dollars per year.
What are the data center certifications that matter?
Uptime Institute’s tier IV (the best) data center rating is a measure of the reliability (uptime) of a data center. Many industry people talk about data centers in terms of the four tiers that Uptime Institute defined, although few facilities spend the money to get the actual Uptime Institute data center certification. How a data center is designed, built and maintained to meet N+N redundancy and concurrent maintainability is what really matters.
SAS 70 data centers are certified to have defined “controls”, or operational procedures for the data center. SAS 70 Type II data centers are independently certified to adhere to these controls that they define. Although SAS 70 has become a requirement in many modern data center projects, the value of a SAS 70 data center certification lies in the quality of the controls that the data center operator defines.
TIA 942 compliant data centers follow the Telecom Industry Associations definitions of a data center. This certification is more detailed than the tier IV data center rating. Lifeline Data Centers builds our facilities to the TIA 942 compliant data center standard because of the granularity of detail in the standard.
Data center compliance refers to the different industry regulations that are placed on a company’s systems and data. We regularly assist our clients in FDA, HIPAA, FISMA, NIST, and Sarbanes Oxley audits. These regulations are increasing by the year; your choice of outsource data center can make a huge difference in your ability to maintain compliance in a cost-effective manner.
Companies outsource the data center to help with certifications and compliance. These companies can leverage the certifications and compliance that the outsource computer room provider maintains. They can reduce the time, money and other resources they must spend on data center compliance and certification.
What data center certifications do you need to meet in order to satisfy the government? What standards are your clients and vendors requiring in order to do business with them? Is your industry changing? Call Lifeline Data Centers at 317.423.2591 to learn more about how to reduce your data center compliance burden.
