+INF.5 Room or Cabinet for Technical Infrastructure
---+INF.5.G1. Incorrect Planning
---+INF.5.G2. Unauthorised Site Access
---+INF.5.G3. Inadequate Ventilation
---+INF.5.G4. Fire
---+INF.5.G5. Water
---+INF.5.G6. Failure of the Power Supply
---+INF.5.G7. Lightning and Overvoltages
---+INF.5.G8. Electromagnetic Interference Fields
---+INF.5.G9. Electrostatic Discharge
---+INF.5.A1 Planning the Room Protection [Planner] (B)
---+INF.5.A2 Location and Size of the Technical Infrastructure Room [Planner] (B)
---+INF.5.A3 Site Access Regulations and Control [Building Services, IT Operation Department] (B)
---+INF.5.A4 Protection Against Intrusion [Planner, Building Services] (B)
---+INF.5.A5 Avoidance of and Protection Against Electromagnetic Interference Fields [Planner] (B)
---+INF.5.A6 Minimising Fire Loads [Employee, Planner] (B)
---+INF.5.A7 Prevention of Incorrect Use [Employee, Planner] (B)
---+INF.5.A9 Power Supply [Building Services] (B)
---+INF.5.A8 Avoidance of Uncontrolled Electrostatic Discharge [Planner] (S)
---+INF.5.A10 Maintenance of Air Temperature and Humidity [Building Services] (S)
---+INF.5.A11 Avoidance of Pipes with Hazardous Liquids and Gases [Planner, Building Services] (S)
---+INF.5.A12 Protection Against Accidental Damage to Supply Lines [Planner] (S)
---+INF.5.A13 Protection Against Fire and Smoke Damage [Planner, Building Services] (S)
---+INF.5.A14 Minimising Fire Hazards from Neighbouring Areas [Planner, Building Services] (S)
---+INF.5.A15 Lightning and Overvoltage Protection [Planner, Building Services] (S)
---+INF.5.A16 Use of an Uninterruptible Power Supply [Building Services] (S)
---+INF.5.A17 Inspection and Maintenance of Infrastructure [Building Services, IT Operation Department, Maintenance Personnel] (S)
---+INF.5.A18 Location of the Technical Infrastructure Room [Planner] (B)
---+INF.5.A19 Redundancy of the Technical Infrastructure Room [Planner] (H)
---+INF.5.A20 Enhanced Protection Against Intrusion and Sabotage [Planner] (H)
---+INF.5.A22 Redundant Power Supply Design [Planner] (H)
---+INF.5.A23 Emergency Power Systems [Planner, Building Services, Maintenance Personnel] (H)
---+INF.5.A24 Ventilation and Cooling [Planner, Building Services, Maintenance Personnel] (H)
---+INF.5.A25 Increased Protection Against Fire and Smoke Damage [Planner] (H)
---+INF.5.A26 Monitoring of the Power Supply [Planner, Building Services] (H)

INF.5 Room or Cabinet for Technical Infrastructure

Introduction

A technical infrastructure room contains technical components that only rarely need to be operated directly on site. However, they are indispensable to building infrastructure, and thus also to IT infrastructure. This can include, for example, power supply distributors, fuse boxes, ventilation systems, telecommunications components, patch panels, switches, or routers. A technical infrastructure room is not a continuous workplace and is usually only entered or opened for maintenance.

If the technical infrastructure to be protected cannot be housed in a separate room or if the room cannot be set up according to the requirements described herein, the technical infrastructure can also be placed in a cabinet specially equipped for this purpose. This can also make sense if a cabinet is the most economical alternative for housing technical infrastructure. The requirements for such rooms should then be transferred as effectively as possible to the cabinet and its shell.

Objective

The objective of this module is to protect a room or cabinet for technical infrastructure structurally, mechanically, and electronically in terms of information security. In principle, a "room" in this context is a room or cabinet within a building, but it can also be a container outside a building or a tent housing technical infrastructure. A room's protective safeguards should be designed to prevent the functional impairment of the technical components located in it to the greatest possible extent.

In this module, only the term “room” will be used for technical infrastructure. However, the requirements of this module can also be applied to cabinets.

Scoping and Modelling

Module INF.5 Room or Cabinet for Technical Infrastructure must be applied to rooms that are used to operate technical infrastructure. The module must also be applied if stationary containers (in the sense of large cabinets) are operated.

As a rule, rooms for technical infrastructure contain only technical components that are typically not housed in a data centre itself (see module INF.2 Data Centre and Server Room). In contrast to server rooms, they only contain IT systems that provide IT services in justified exceptional cases. One such exception relates to small information domains with, for example, only one or a very small number of servers or IT systems. This might apply to a small or medium-sized company with a small number of IT workstations and a server which is located in a separate room. In such cases, it is often sufficient to fulfil the requirements of this module instead of those detailed in module INF.2 Data Centre and Server Room. Requirements for cabling are dealt with in module INF.12 Cabling.

Useful Resources

In “DGUV Vorschrift 4 Unfallverhütungsvorschrift, Elektrische Anlagen und Betriebsmittel” [DGUV Regulation 4, Accident Prevention Regulation, Electrical Installations and Equipment], the German Social Accident Insurance (DGUV) provides guidelines for the correct handling of equipment.

The German Institute for Standardisation (DIN) provides specifications for floor coverings in the standard DIN EN 14041:2018-05.

The German Institute for Standardisation (DIN) provides specifications for physical security in buildings and rooms in the standard DIN EN 1627:2011-09.

The German Institute for Standardisation (DIN) provides specifications for the fire behaviour of building materials and building components in the standard DIN EN 4102:2016-05.

The International Electrotechnical Commission provides notes on lightning protection standards in BS EN/IEC 62305.

In the guideline VdS 2311:2017-04, the VdS provides specifications for the use of intrusion systems.

1. Oversigt

Titel Standard
INF.5.A1 Planning the Room Protection [Planner] (B)

Adequate technical and organisational requirements MUST be defined and implemented for a room for technical infrastructure. The level of protection to be achieved for the room MUST be considered. Planning MUST take into account both legal rules and regulations and potential hazards related to environmental influences, intrusion, and sabotage.

INF.5.A2 Location and Size of the Technical Infrastructure Room [Planner] (B)

A technical infrastructure room MUST NOT be a passageway. It MUST be ensured that sufficient space is available for escape routes and the work activities planned.

INF.5.A3 Site Access Regulations and Control [Building Services, IT Operation Department] (B)

A technical infrastructure room MUST be protected against unauthorised access. There MUST be rules on who may enter the room, for which areas, for what purposes, and for how long. In this respect, it MUST be ensured that no unnecessary or excessive site access rights are granted. All instances in which a person accesses a technical infrastructure room SHOULD be individually recorded by a site access control system.

INF.5.A4 Protection Against Intrusion [Planner, Building Services] (B)

A technical infrastructure room MUST be protected against intrusion. Depending on the required security level of the room, suitable room-forming components SHOULD be selected, such as walls, ceilings, and floors, as well as windows and doors with appropriate resistance classifications in line with DIN EN 1627.

INF.5.A5 Avoidance of and Protection Against Electromagnetic Interference Fields [Planner] (B)

Electromagnetic fields MUST be avoided in the immediate vicinity of a technical infrastructure room. A sufficient distance to large machines such as lift motors MUST be maintained.

INF.5.A6 Minimising Fire Loads [Employee, Planner] (B)

Fire loads within and in the immediate vicinity of a technical infrastructure room MUST be minimised. Combustible materials MUST be avoided in room-forming components.

INF.5.A7 Prevention of Incorrect Use [Employee, Planner] (B)

A technical infrastructure room MUST NOT be used for other purposes (e.g. as a storeroom or cleaning cupboard).

INF.5.A9 Power Supply [Building Services] (B)

The power supply grid supplying a technical infrastructure room and the terminal equipment connected to it MUST be constructed as a TN-S system.

INF.5.A8 Avoidance of Uncontrolled Electrostatic Discharge [Planner] (S)

A dissipative floor covering SHOULD be installed in a technical infrastructure room in accordance with DIN EN 14041.

INF.5.A10 Maintenance of Air Temperature and Humidity [Building Services] (S)

It SHOULD be ensured that the air temperature and humidity in a room for technical infrastructure are within the limits specified on the data sheets of the equipment operated in the room. A suitable ventilation and air-conditioning system SHOULD be used for this purpose. This system SHOULD have sufficient capacity.

INF.5.A11 Avoidance of Pipes with Hazardous Liquids and Gases [Planner, Building Services] (S)

A room for technical infrastructure SHOULD only contain pipes that are absolutely necessary to operate the technology in the room. Sewage pipes, fresh water pipes, gas and heating pipes, and pipes for fuel or steam SHOULD NOT be routed through the space.

INF.5.A12 Protection Against Accidental Damage to Supply Lines [Planner] (S)

Supply lines outside a technical infrastructure room SHOULD be protected against accidental damage.

INF.5.A13 Protection Against Fire and Smoke Damage [Planner, Building Services] (S)

Irrespective of the building regulations pertaining to fire protection requirements that apply to a technical infrastructure room, all room-forming components, as well as doors and windows, SHOULD be equally smoke-tight. They SHOULD resist fire and smoke for at least 30 minutes. Fire loads in the vicinity of cable trays SHOULD be avoided.

INF.5.A14 Minimising Fire Hazards from Neighbouring Areas [Planner, Building Services] (S)

A technical infrastructure room SHOULD NOT be located in close proximity to other rooms with combustible materials in quantities exceeding typical office use.

INF.5.A15 Lightning and Overvoltage Protection [Planner, Building Services] (S)

A lightning and overvoltage protection concept should be developed and implemented in accordance with the principle of energetic coordination (see DIN EN 62305). A technical infrastructure room SHOULD be classified in accordance with lightning protection zone 2 (LPZ 2) at minimum. The lightning and overvoltage protection devices SHOULD be checked regularly to ensure they are fit for purpose and replaced if necessary.

INF.5.A16 Use of an Uninterruptible Power Supply [Building Services] (S)

The equipment that should be connected to a UPS SHOULD be checked. If a UPS is required, the backup time of the UPS SHOULD make it possible to shut down all the supplied components safely. Consideration SHOULD be given to the ageing of batteries in UPS systems.

If there are relevant changes, the capacity of existing UPS systems SHOULD be checked. UPS batteries SHOULD be kept within the required temperature range.

A UPS SHOULD be serviced and checked for functionality at regular intervals. For this purpose, the maintenance intervals provided by the manufacturer SHOULD be observed.

INF.5.A17 Inspection and Maintenance of Infrastructure [Building Services, IT Operation Department, Maintenance Personnel] (S)

At minimum, the recommended intervals and guidelines for inspection and maintenance recommended by the system manufacturer or those specified in standards SHOULD be followed for all components of physical and technical infrastructure. Cable and pipe penetrations through fire and smoke compartment boundary walls SHOULD be inspected to ensure that the partitions have the required approval for the purpose at hand and remain intact. Inspections and maintenance MUST be appropriately recorded.

INF.5.A18 Location of the Technical Infrastructure Room [Planner] (B)

Within the respective building, a technical infrastructure room SHOULD be located in a place that is not exposed to internal or external hazards such as rain, water, or sewage. On floors above ground level, care SHOULD be taken to ensure that the room is not heated by solar radiation. If the room is located on the top floor of the building, care SHOULD be taken to ensure that water cannot enter through the roof.

INF.5.A19 Redundancy of the Technical Infrastructure Room [Planner] (H)

A technical infrastructure room SHOULD be designed redundantly. Both rooms SHOULD have a dedicated electrical sub-distribution that is directly supplied by the low-voltage main distribution panel (LVMDP). Both rooms SHOULD be assigned to different fire zones and, if necessary, have their own respective ventilation and air-conditioning systems.

INF.5.A20 Enhanced Protection Against Intrusion and Sabotage [Planner] (H)

A technical infrastructure room SHOULD be windowless. If there are windows, they SHOULD be adequately secured against intrusion from the outside depending on the storey of their location. If, in addition to windows and doors, there are other openings necessary for operations (such as ventilation ducts), these SHOULD have the same protection as the room envelope.

Intrusion detection systems SHOULD be used in line with VdS class C (according to VdS Guideline 2311). All required doors, windows, and other protected openings SHOULD be monitored via the intrusion system for closure, locking, and break-in. Any windows SHOULD always be closed.

The resistance class of room-forming components, windows, and doors SHOULD be adapted to the security needs of the room in question. The quality of locks, locking cylinders, and security fittings SHOULD correspond to the resistance class of the door at hand.

INF.5.A22 Redundant Power Supply Design [Planner] (H)

In a technical infrastructure room, there SHOULD be a two-line power supply that runs all the way from the low-voltage main distribution board (LVMDS) to the consumer. These power supplies SHOULD be located in separate fire zones. The LVMDS SHOULD be redundant in operation.

INF.5.A23 Emergency Power Systems [Planner, Building Services, Maintenance Personnel] (H)

An organisation's energy supply SHOULD be supplemented by an emergency power system (EPS). The fuel supply for the EPS SHOULD be checked regularly. The EPS SHOULD also maintained at regular intervals. Load and functional tests, as well as test runs under load, SHOULD be conducted when performing maintenance.

INF.5.A24 Ventilation and Cooling [Planner, Building Services, Maintenance Personnel] (H)

Ventilation and cooling systems SHOULD be designed to be redundant in operation. It SHOULD be ensured that these systems are regularly maintained.

In case of very high protection needs, maintenance redundancy SHOULD also be ensured.

INF.5.A25 Increased Protection Against Fire and Smoke Damage [Planner] (H)

Room-forming components, as well as doors, windows, and ventilation flaps, SHOULD resist fire and smoke for at least 90 minutes. The supply lines SHOULD guarantee a functional integrity of at least 90 minutes.

In case of very high protection needs, the room envelope SHOULD be designed as a separate fire zone. Fire dampers controlled by smoke detectors SHOULD be installed in ventilation ducts. Cable trays SHOULD be routed through separate fire zones until they enter the room.

In case of very high protection needs, an early fire detection system and an automatic extinguishing system SHOULD be provided. Fire and smoke detectors SHOULD be connected to the fire alarm control panel. The early fire detection system and the automatic extinguishing system SHOULD be connected to the two-line power supply with UPS and EPS.

INF.5.A26 Monitoring of the Power Supply [Planner, Building Services] (H)

Suitable monitoring equipment SHOULD be installed and operated that can detect prohibitively high currents on the protective conductor system and thus on cable shields (as well as potentially disturbing harmonic oscillations) and flag them in a suitable location for follow-up and remedial action.

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav
Kilde Krav

3. Relaterede reguleringer

Reguleringer
Kilde Regulering

Linkede sager