Access Control Systems (ZuKo)
We use multiple levels of security in data centers today to secure the facilities. We proceed according to a graded zone concept.
First Layers of Protection
The outer perimeter forms the first security zone. A security fence protects the site, with cameras monitoring entrances and exits. Access to the building is controlled through security staff so that people entering can be checked. Cameras transmit images to the security control room. Retention periods are defined for the specific purpose and applicable data protection requirements. Staffing requirements for the security checkpoint are established within the protection concept.
Anyone wishing to enter the building must first register so that security personnel are informed in advance and can then verify the registration. If the person is an employee of a customer of the data center, the next step is a check against the customer's official personnel list. The list should never be older than 30 days and should be updated immediately when there is a change in personnel.
The second security zone is between the security desk and the actual data center area. These access routes within the building, as well as commonly used spaces such as conference rooms, kitchens and restrooms, require surveillance to prevent unauthorized access. A connection between camera and door access system or motion-controlled cameras are now standard for these areas. As a rule, alarms are raised in the security center if a door is not closed within a predefined period of time.
Full Protection
The third zone is the high-security zone, in which the areas for the IT systems and the system-critical systems of the data center operator are located. The highest security requirements apply in this zone. The doors should always be secured with cameras and a second protective measure such as access control systems or locks. To keep things running smoothly and to make sure everything is up to date, data center access control systems should be regularly checked and maintained.
A multi-layer access concept combines appropriate mechanical and electronic measures, such as access controls, security entrances and two-factor authentication. Selection depends on protection needs and operating processes. Biometrics and other personal data require assessment of the legal basis, necessity, permissions and retention. The technical access solution alone does not establish data protection compliance.
Access control for sensitive IT areas
Zones and permissions
An access concept distinguishes the site, building, plant areas and IT spaces. Permissions follow roles, tasks and time windows. Visitors, contractors and emergencies require defined procedures, including handling lost or expired credentials.
Identification and door status
Credential readers, additional authentication and door monitoring serve different purposes. A valid credential alone does not establish that only one person enters. Door contacts, locking and, where appropriate, single-person passage must match the protection required.
Integration and failure behaviour
Controllers, power supplies and networks are planned together. The functions available during communication or power failure must be defined. Escape routes and fire safety requirements must be coordinated with the door’s security function.
Logging and handover
Access events and faults need traceable evaluation and defined access and deletion rules. Acceptance includes permission, door and fault tests. Operators receive documented responsibilities and procedures for changes and maintenance.
Advantage of High Knowledge
We develop security solutions that address all of these requirements. Do you have questions about our security solutions or need individual advice? Feel free to contact us for a consultation.
Advantage of High Knowledge
High Knowledge experts know the latest trends and developments in the industry. We have been successfully planning and implementing data centers of all sizes for over 20 years. With us you get the professional advice you need to be able to operate your data center safely and reliably. Feel free to contact us for a consultation.
