Auditing a data centre but to what standard?

Transcription

1 Auditing a data centre but to what standard? Matt Flowerday RCDD Capitoline LLP mflowerday@capitoline.co.uk

2 Data centre auditing Capitoline has audited over 30 data centres in the UK, Ireland, Netherlands and the Middle East Capitoline is the audit partner for the Amsterdam Internet Exchange and Cisco EMEA No two customers have the same expectation from a data centre audit

3 What are the motives to obtain a DC audit? Their customers require it Need to understand Tier rating Know they have problems but need an external consultant to confirm that to free up funding Have current and severe operational problems and need to start the overhaul/replacement process Need ISMS audits such as ISO Need to know their green/co 2 /PUE position Want compliance with H&S and other legislation

4 About 50 separate standards that could be applied to a data centre plus many national requirements

5 Tier rating The UpTime Institute = TIA 942 = BICSI 002

6 Tier Standards TUI is a design philosophy Tier 1, basic requirements Tier 2, redundant components Tier 3, concurrently maintainable Tier 4, Autonomous fault tolerance TIA 942, a prescriptive design guide BICSI 002, some different ideas

7 Physical & Operational problems Overheating Power problems Connectivity Health safety

8 ISMS Information Security Management standards

9 ISO series

10 ISO code of practice Information technology Security techniques Code of practice for information security management 1. Introduction and scope 2. Terms & definitions 3. Structure of the Standard Big on questions but 4. Risk assessment and treatment proposes no answers 5. Security policy 6. Organisation of information security 7. Asset management 8. Human resources security 9. Physical and environmental security 10. Communications and operational management 11. Access control 12. Information systems, acquisition, development & maintenance 13. Information security incident management 14. Business continuity management 15. Compliance

11 Do you handle credit/debit card transactions or keep financial data?

12

13 US requirements Sarbanes-Oxley Act Health Insurance Portability and accountability Act Gramm-Leach Billey Act State level legislation Payment card industry standard International Traffic in Arms Regulations

14

15

16

17

18

19

20 Green credentials 2001 European Directive on Energy performance in Buildings 2006 Building Regulations Part L 2006 EU Energy Services Directive 2007 Climate Change Bill Server and Data Center Energy Efficiency, Public Law , April 2007 Code of Conduct on Data Centres November 2008

21 Make your reputation by inventing a metric The Green Grid Environmental Protection Agency, EPA US Department of Energy, DoE Silicon Valley Leadership Group Mckinsey The UpTime Institute Leader Environmental Design, LEED BREEAM Transaction Processing Performance Council, TPPC

22 Data centre metrics DCiE Data Centre infrastructure Efficiency DCiE = IT equipment Power Total facilities Power Power Usage Effectiveness, PUE = 1 DCiE Advantages Simple Disadvantages the servers, though taking most of the energy, may not actually be doing any useful work

23 Energy Usage Effectiveness EUE Energy Star is developing an improved metric* called Energy Usage Effectiveness (EUE) = Total Energy / UPS Energy EUE is based on energy, not power Total Energy includes all fuels (electricity, natural gas, diesel, etc.) EUE is based on source energy, not site energy Source Energy is the total amount of raw fuel required to operate the building

24 Build on existing ENERGY STAR platform with methodology similar to existing ratings (1-100 scale) Usable for both stand-alone data centers and data centers housed within office or other buildings Offer the ENERGY STAR label to data centers with a rating of 75 or higher

25 The UpTime Institute Data Center Energy Efficiency and productivity (DC-EEP) Index DC-EEP=(IT-PEW) x (SI-EER) IT-PEW=IT Productivity per embedded watt SI-EER=Site Infrastructure Energy Efficiency (same as PUE) TUI say average SI-EER is 2.5 or 40%

26 Harmonizing Global Metrics The United States of America, European Union and Japan Reach Agreement on Guiding Principles for Data Center Energy Efficiency Metrics, February 2, 2010

27 Harmonizing Global Metrics Desired Outcomes Effective energy efficiency metrics that: 1. Measure the actual IT work output of the data center compared to actual energy consumption. It is of note that in the process to define IT work output, the following interim measurements are being defined and / or validated: a. IT - Measure the potential IT work output compared to expected energy consumption; and measure operational utilization of IT equipment b. Data center facility and infrastructure - Measure the data center infrastructure efficiency (PUE) 2. Measure renewable energy technologies and re-use of energy to reduce carbon

28 Data centre Auditing What does the customer want to achieve? Use the right audit package to answer the customer s questions/requirements Select from the range of appropriate standards available. There is no one standard that fits all requirements An audit includes business processes not just physical attributes

29

30 Thank you Matt Flowerday RCDD Capitoline LLP