Chapter 4: Auditing Data Centers and Disaster Recovery

Background

Ever since the ENIAC was created in 1946, data center-class computer systems have had specific environmental, power, and physical security requirements. Beginning in the late 1950s, as mainframe computers became more widely available, purpose-built data centers were created to meet these requirements. Now, most organizations have their own data centers or collocate their systems in a shared facility.

Today's data centers provide the physical access control infrastructure, environmental control, resilient power and network connectivity, fire suppression systems, and several different types of alarm systems. The data center infrastructure is designed to maintain a constant optimal computing environment. The auditor's role is to verify and validate that all the necessary systems and procedures are present and working properly to protect the confidentiality, integrity, and availability of information.