+Protection against interruptions caused by power failures and other such risks

Protection against interruptions caused by power failures and other such risks

Measures to prevent the failure of the technical supply facilities required for the operation of system components with which information from cloud customers is processed, are documented and set up in accordance with the security requirements of the Cloud Service Provider (cf. PS-01 Security Concept) with respect to the following aspects:
a) Operational redundancy (N+1) in power and cooling supply
b) Use of appropriately sized uninterruptible power supplies (UPS) and emergency power systems (NEA), designed to ensure that all data remains undamaged in the event of a power failure. The functionality of UPS and NEA is checked at least annually by suitable tests and exercises (cf. BCM04 Verification, updating and testing of business continuity).
c) Maintenance (servicing, inspection, repair) of the utilities in accordance with the manufacturer's recommendations.
d) Protection of power supply and telecommunications lines against interruption, interference, damage and eavesdropping. The protection is checked regularly, but at least every two years, as well as in case of suspected manipulation by qualified personnel regarding the following aspects:
• Traces of violent attempts to open closed distributors;
• Uptodatedness of the documentation in the distribution list;
• Conformity of the actual wiring and patching with the documentation;
• The short-circuits and earthing of unneeded cables are intact; and
• Impermissible installations and modifications.
Additonal CriteriaUninterruptible Power Supplies (UPS) and Emergency Power Supplies (NPS) are designed to meet the availability requirements defined in the Service Level Agreement.
The cooling supply is designed in such a way that the permissible operating and environmental parameters are also ensured on at least five consecutive days with the highest outside temperatures measured to date within a radius of at least 50 km around the locations of the premises and buildings, with a safety margin of 3 K (in relation to the outside temperature). The Cloud Service Provider has previously determined the highest outdoor temperatures measured to date (cf. PS-01 Security Concept).
The connection to the telecommunications network is designed with sufficient redundancy so that the failure of a telecommunications network does not impair the security or performance of the Cloud Service Provider.
Supplementary Information - About the CriteriaMeasures to prevent the failure of the technical supply facilities are e.g. power supply, cooling, fire-fighting technology, telecommunications, security technology, etc.
Cloud Service Providers can ensure that all data remains undamaged in the event of a power failure by shutting down servers following a defined procedure.
Power supply and telecommunications lines can be protected against interruption, interference, damage and eavesdropping by e.g. underground supply via different supply routes.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace