A recent incident at CI Host reminds me that not all data center facilities are created equal. Because of that, here's a quick post with some information about the security at the data center that houses ORCS Web's managed servers:

Entering the building from the outside there is a station manned with a live person. Now inside the building, the person entering is still pretty far from any equipment. The next step is to enter what is sometimes called a "man trap". This area can only be entered by use of a proximity card and keying in a corresponding PIN number. Now in the "man trap" area the person is still not in the data center and has no access to any equipment. The next step is to pass another secure entrance that requires a proximity card and corresponding biometrics. Okay, now in the data center, all the equipment is still locked securely in cabinets and cages. Sounds a bit extreme to some, but we really can't be too safe when it comes to physical security. Hearing stories of situations at other data centers reminds us of that point.

Once inside, there are cameras all through the data center areas. Those cameras are actually monitored live onsite by multiple staff 24 hours per day - not just recorded as in some data centers. There are also vibration detection devices placed through the datacenter. I know these work because I've set them off myself. It's odd, in a good sort of way, to have a NOC person walk up to you to reprimand about setting off an alarm. I tripped an alarm and they quickly identified me on the cameras and came to tell me what I did. Very fast, professional, and cool.

Well, I just wanted to share some physical security information. Not everyone knows what levels we take to protect our customers.

~Brad