What is a Compliant Data Center?

October 5th, 2010 by Carpathia Hosting

Simply put, a compliant data center is a data center that conforms to a set of regulatory rules, specifications, standards or laws. Conforming to mandated laws or standards to meet federal and commercial regulations requires a considerable investment infrastructure, personnel and services. However, due to the significant cost, many commercial or private data centers have not made the proper investment in the physical, environmental and operational controls and services to meet the minimum regulatory requirements. Most regulatory requirements map to industry best practices such as redundant power and cooling, intrusion detection, 24x7x365 monitoring and staff, backups and documented policy and procedures. IT security and Information Assurance professionals tasked with ensuring their information systems meet compliance requirements, have limited options when it comes to selecting a compliant data center.

A compliant data center is more than just redundant infrastructure. Infrastructure, intrusion detection and information systems must be monitored, maintained and protected 24x7 by data center personnel in a compliant manner. Documenting the policy and procedures that govern how data center personnel monitor, maintain and protect customer information systems is a key requirement in the compliance roadmap. This key requirement is what separates a compliant data center from a non-compliant data center. Most information systems with a compliance requirement will be subject to an onsite review by compliance auditors in order to validate what controls are in place. Failure to provide documented policy and procedures to compliance auditors can result in a non-compliance designation for a system.

There are however, a few commercial hosting companies that specialize in delivering compliant data center infrastructure and services that map to federal and commercial regulations (FISMA, DIACAP, HIPAA, SOX, PCI and GLB) giving IT Security and information assurance professionals options on where to host their information system. This select few commercial hosting providers have made the investment in critical infrastructure, tools, services and personnel required to achieve compliance giving information system owners a valid and cost-effective compliant option without having to choose the cost prohibitive option of upgrading their internal infrastructure, personnel or services.

Write a comment

Required fields are marked with *.

Showing comments 1 to 4 of 5 | Next | Last

mvoiuwblbth
Posts: 5

ZMGabOuuuCla
Reply #5 on : Tue April 17, 2012, 16:56:15

IoViUl , [url=http://acyrhrztzhze.com/]acyrhrztzhze[/url], [link=http://dpbvbgxzcqux.com/]dpbvbgxzcqux[/link], http://fwauawoyqfww.com/

rwluistazzk
Posts: 5

DFiabajFyEuNAmWXfRE
Reply #4 on : Mon April 16, 2012, 05:44:08

ZFJqWb , [url=http://xkurqiflvyiu.com/]xkurqiflvyiu[/url], [link=http://fgayqxjtgujb.com/]fgayqxjtgujb[/link], http://ieydmuofalps.com/

Vitinho
Posts: 5

UxLKlBEsohRIh
Reply #3 on : Sat April 14, 2012, 14:02:07

Since it's all technical stuff, it's futerenqly pretty interesting. My whole job is about solving puzzles, really, in multiple dimensions. As long as I don't let myself get sucked into it on a personal level, and just treat it like the big mental role playing game it is, it's kinda fun. It's just that when I get too tired, which seems like most of the time these days, it gets harder to treat it like a puzzle.

oslnyyfwtg
Posts: 5

oENrTJxBAbpILfCan
Reply #2 on : Mon September 19, 2011, 07:49:45

YRk1P6 , [url=http://nhghyamsuygy.com/]nhghyamsuygy[/url], [link=http://hyedkldbucxb.com/]hyedkldbucxb[/link], http://yzkotpssgleb.com/

Showing comments 1 to 4 of 5 | Next | Last