+PS-05 Protection against Threats from Outside and from the Environment
---+PS-05.01B
---+PS-05.02B
---+PS-05.03B
---+PS-05.04B

1. Übersicht

PS-05 Protection against Threats from Outside and from the Environment

-
PS-05.01B Premises and buildings related to the cloud service provided are protected from fire, smoke, lightning and unwanted water by structural, technical and organisational measures that meet the security requirements of the cloud service provider (cf. PS-01).
PS-05.02B Structural Measures include the following aspects:

1. Establishment of fire sections with a fire resistance duration of at least 90 minutes for all structural parts, or alternatively, equivalent organisational and technical measures that ensure the same level of protection standard as 90-minutes fire-resistant structural parts or establishment of compensating measures for containing fires and maintaining operational capability. If compensating measures are taken into account, the fire resistance of structural parts has to be at least 60 minutes;
2. Effective implementation of measures to protect against lightning and overvoltage damage; and
3. Effective implementation of measures to protect against flooding, unless critical facilities are located significantly above the highest flood level at the location of the cloud data centre. Additionally, appropriate measures to mitigate the effects of heavy rain are implemented, unless critical facilities are located significantly above the backwater level at the location of the cloud data centre.


Structural parts are walls, ceilings, floors, doors, windows and other breakthroughs like ventilation flaps, etc.

Compensating measures can take into account aspects such as:

1. Partitioning and layout of fire sections;
2. Extinguishing systems within the fire sections;
3. Early and very early fire detection mechanisms;
4. Redundancy of systems and supply facilities within the premise; and
5. Period of time the locations and premises can withstand a fire impairing a data hall without a second data hall catching fire.

The cloud service provider should describe the measures taken to protect its premises and buildings against fire as part of the system description.

The location of all critical facilities in relation to the highest historically recorded flood level at the cloud data centre site or the site's backwater level acts as the starting point for considering flood and heavy rain protection measures.
PS-05.03B Technical Measures include the following aspects:

1. Early fire detection with automatic voltage release. The monitored areas are sufficiently fragmented to ensure that the prevention of the spread of incipient fires is proportionate to the maintenance of the availability of the cloud service provided;
2. Extinguishing system or oxygen reduction; and
3. Fire alarm system with reporting to the local fire department.


The monitoring of the environmental parameters is addressed in PS-07. When exceeding the allowed control range, alarm messages are generated and forwarded to the responsible cloud service provider.
PS-05.04B Organisational Measures include the following aspects:

1. Regular fire protection inspections to check compliance with fire protection requirements; and
2. Regular fire protection exercises.

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.2 Related Regulation

2. Identifizierte Anforderungen

Anforderungen

3. Related Regulations

Regulations
Impressum