This policy outlines security procedures for data centers and secure equipment areas within the Netspective Communications LLC. It applies to cloud-hosted providers, facilities designated as data centers or secure equipment areas, and all employees, management, and suppliers who operate within these locations. [FII-SCF-009-DCH-01]
-
The Netspective Communications LLC classifies the following locations as secure areas, and this policy governs them:
- List all data center locations and secure areas under the Netspective Communications LLC’s control.
-
Each data center and secure area must have an assigned manager. The Netspective Communications LLC’s records must document the manager’s name. In the case of on-premise data centers, the manager’s name must also be posted in and near the secure area.
-
Each secure area must have clear markings, and access to the area must be controlled by a locked door at a minimum. A visitor access log must be clearly marked and easily accessible just inside the door.
-
Individuals who are not employed by the Netspective Communications LLC are considered visitors. Visitors accessing secure areas must:
-
Obtain access to secure areas according to reference a.
-
Only enter and remain in secure areas when accompanied by a designated employee. The employee must stay with the visitor throughout their entire stay inside the secure area.
-
Log the exact time of entry and exit in the visitor access log.
-
-
The following activities are prohibited within secure areas:
-
Taking photographs or recording videos or audios of any kind.
-
Connecting any electrical device to a power supply unless specifically authorized by the responsible person.
-
Unauthorized usage or tampering with any installed equipment.
-
Connecting any device to the network unless specifically authorized by the responsible person.
-
Storing or archiving large amounts of paper materials.
-
Storing flammable materials or equipment.
-
Using portable heating devices.
-
Smoking, eating, or drinking.
-
-
Security and safety compliance checks must be conducted in secure areas at least quarterly.