Network-critical Physical Infrastructure (NCPI) Vulnerability Assessment

Transcription

1 Network-critical Physical Infrastructure (NCPI) Vulnerability Assessment Explanation: Network-critical physical infrastructure (NCPI) is the foundation upon which IT networks reside. It consists of power, power distribution, racks, cabling, cable distribution, cooling, and cooling distribution, as well as the servicing and management of these applications. The goal of the NCPI Vulnerability Assessment is to provide clients with a highly available network. APC channel partners may position this assessment as either a unique service offering or as part of existing assessments they perform such as: Network Assessments, Infrastructure Assessments, IP Telephony Assessments, Security Assessments, Server/Storage Assessments, Business Continuance, and Disaster Recovery Assessments. Instructions: APC partners fill out the assessment questionnaire with their client either face-to-face or over the phone. One full assessment should be completed for each location that their client deems mission-critical. Once complete, the partner forwards the assessment(s) to APC for review. APC will respond to the APC partner with a list of recommendations, which the client should consider implementing in order to maintain mission-critical levels of availability at the NCPI layer. Unless otherwise specified, the results of the NCPI assessment will be provided to the APC channel partner who submitted it, not directly to the client. Therefore, the partner may include the deliverable as part of a broader list of recommendations related to their client s needs. Assessments must be ed or faxed to: rita.katechis@apcc.com Fax: Assessment Done \ \ Date Required Back \ \ (Date) (Date)

2 Contact information: Channel Partner Information (all fields must be completed) Company Name Address City, State. Zip Sales Representative Name Phone ( )- - APC Support Team (if known) Field Sales Support Rep Inside Sales Support Rep Optional Client Information Business Name Address City, State. Zip Main Contact Phone ( ) - - Application: NCPI Vulnerability Assessment: Questionnaire For Level One Assessments 1. Computer/Communications Room Environment A. How would you describe your environment at this site? (fill in # of each type of environment at this site) # Closet (1-2 racks) # Computer or Communications Room (3-10 racks/cabinets) # Mid-size Data Center, Computer or Communications Room ( racks) # Large Data Center (100+ racks) # Other (description): B. How many other sites does your IT/Communications network extend to? # C. What types of sites are your other locations? Disaster Recovery Redundant computer/data center Main data center Regular Office space Other: D. Do your other locations have a NCPI architecture similar to this location? If no, how are they different?

3 E. What mission-critical applications/business processes are running in this environment? SAN NAS VoIP E-commerce Order Fulfillment Product development Production (Manufacturing) Accounting Payroll ERP Warehousing & Logistics Retailing (store operations) Professional services (legal, financial, consulting, etc.) CRM Other, please specify: F. What is the estimated cost if this environment were down for 1 hour? $. G. Which of the applications/business processes in question B have redundant UPSs supporting them? Please list: H. What is the size of the closet/room? Sq/Ft I. Does the closet/room have raised floor? J. Is there a dropped ceiling? K. Are you experiencing equipment failures that cannot be explained? L. Please complete the following: Current In one year How many servers are in the room? # # How many servers are on the entire network? # # How many switches are in the room? # # How many switches are on the entire network? # # How many racks are in the room? # # How many racks are on the entire network? # # How many desktop computers are on the network? # # How many laptops are on the network? # #

4 M. How confident are you that your current NCPI architecture will allow you to operate for 1 full working day in the event of a blackout? (1= not at all confident, 5 = 100% certain. I d bet my job on it.) Rank N. How many single points of failure exist in your NCPI architecture today? # Please explain O. Do you have any concerns about your computer room s ability to deal with high power/heat density equipment such as blade servers? If yes, please explain: P. Do you own your building or is it a leased space? Own Lease If leased, remaining duration of the lease? Months/Years Q. Who is the person in your company that is responsible for business continuity and IT system availability? Name Title Phone R. Who are the key contacts for gathering information about power, cooling and rack systems at this location? building owner building electrician electrical contractor consulting engineer IT manager other, please explain: 2. Racks A. Type of rack/cabinet: Enclosure Height (U) Width Depth Open 4-post Open 2-post A1. Rack brand/vendor: A2. Rack model: A3. # of power receptacles per rack (average): B. Type of power distribution system to racks (check one) Overhead Under floor Other (description): C. Is it difficult to run power/data cables to new/existing equipment in the rack?

5 D. Are there enough outlets for existing/additional equipment in the rack? 3. Power A. How many UPSs do you have in the following kw ranges? 0-3kW 3.1-5kW kW kW kW kW 80.1kW+ B. What is the average age of the UPSs (estimate)? C. How many of the UPSs are currently out of warranty? # D. What is the estimated total load of IT equipment that needs UPS protection (add up kw of all mission-critical equipment needing power protection)? kw E. In the event of a power outage, how much runtime will your current NCPI architecture provide the network? Minutes F. How much runtime would you ideally like to have? Minutes G. When were the batteries last replaced? Years H. Have the UPS or batteries ever failed under power failure conditions? J. Is the location backed up by a generator? If yes: J1. What is the capacity of the generator(s)? Qty kw J2. What is the total current load on the generators? kw J3. How much time does it take for the generator to start up in the event of a power outage? Seconds Minutes J4. How much runtime will the generator deliver in the event of a power outage? Minutes Hours 4. Cooling A. Is there an existing cooling solution in the closet or room? (if no, skip to section 5B)

6 If yes: A1. Is the cooling solution dedicated to the computer room or part of the building A/C system? Dedicated Building system A2. Cooling System Brand/Manufacturer: A3. Age of cooling system: Years A4. Type of cooling system (check all that apply) Floor mount Ceiling mount Portable spot cooling A5. Is the cooling system SNMP manageable? B. Are the racks/cabinets in the computer/communications room laid out in rows set up in a hot/cold aisle configuration? ( hot/cold aisle configuration = front side of racks/cabinets face each other & back sides of racks/cabinets face each other) B1. If yes to B, are cooling units located perpendicular to the aisles? C. Are blanking panels used to help with airflow in areas of cabinets where no equipment is installed? 5. Environmental Monitoring & Management A. What is the client's strategy for managing NCPI across their entire network? (Check all that apply) Centralized SNMP management utilizing a network management tool, such as HP OpenView, Tivoli, etc. Vendor-proprietary management system, such as PowerChute plus. Manual checks of equipment via a regular maintenance program or equivalent. Utilization of a building management tool, such as Johnson Controls or equivalent. management strategy in place for NCPI. B. What is the client's current strategy for monitoring & managing the health of their UPS batteries? (Check all that apply) Centralized SNMP management utilizing a network management tool, such as HP OpenView, Tivoli, etc. Vendor-proprietary management system such as PowerChute plus. Manual checks of equipment via a regular maintenance program or equivalent. Utilization of a building management tool such as Johnson Controls or equivalent. management strategy in place for all NCPI.

7 C: What is the client's current strategy for monitoring the temperature of their room/rack? (Check all that apply) Monitors temperature of the room via local thermostat. Remotely monitors temperature of the room. Monitors temperature of individual rack via a thermostat. Remotely monitors temperature of the individual racks. Doesn't really monitor - utilizes ad hoc maintenance or other program. D: What is the client's current strategy for managing access/security? (Check all that apply) Remotely manage door sensors. Room-level security such as key lock, retina scan, punch card. Remotely managed locks on racks. strategy in place. 6. Service A. Is the client concerned about the quality of service on NCPI equipment? B. Is the client concerned about the cost of service on NCPI equipment? C. What is the length of the current service contract on UPSs? Years D. When will the current service contract finish? / Date (month/year) 7. Future Plans A. Has the client put a plan in place to address the need for flexibility/adaptability in their NCPI architecture to account for unpredictable, changes/growth in their IT environment? If no, are they interested in receiving guidance in this area? B. Is the client planning to move to a new location within 5 years? Maybe C. Is the client planning to consolidate or move IT equipment at this location within 1 year?

8 D. What improvements would the client like to make to the current computer room? UPS Power Distribution Racks Cable Management Cooling Management Service Availability/Uptime Aesthetics Please provide a diagram of the location on the graph American Power Conversion Corporation. All Trademarks are the property of their owners. esupport@apcc.com 132 Fairgrounds Road, West Kingston, RI USA DSN-0748