I am often asked about the types of certifications that ColoSpace maintains on its network of six data centers. Our customers often host critical data that is subject to a host of internal and regulatory requirements. The best report a data center can provide is a copy of its SAS70 Type II audit.
Very simply SAS 70 (Type II) is an audit of one’s own procedures, in our case, the operation of a colocation and managed services provider, by an independent CPA firm, over a one year period of time, after which a report is issued to the client (ColoSpace, in this case) at the end of the year. Once completing the yearly report, the clock starts to begin all over, and a new audit is started by the same, or another firm.
I personally think the costs are high, but also believe the benefits are worth the effort by both us and our customers. At ColoSpace, everyone participates in one way or another with the audit, and our customers are involved as well. We appreciate their help with updating and verifying our access lists and customer information every quarter. Customer employees do leave their jobs, and sometimes we are the last to know. Getting quarterly verification of employees with data center access, is a good reminder that we should be the first to know, rather than they other way around. We have the ability to immediately suspend access, if we or the employer feels it is necessary.
We have weekly and monthly maintenance checks that need to be made to insure our electrical and cooling equipment, as well as emergency generator, access systems, surveillance equipment, and a number of other items are thoroughly checked to increase uptime performance. Having independent audits to insure these items are completed timely and correctly, is very important to me. It does seem like big brother watching our staff, but it is easy to skip some tasks when you get busy on other things.
Another good result for our company, is that we standardized our facilities and procedures across all six data center locations. We found this to be costly at first, because each facility does have differences in equipment layout, types and sizes of various mechanical devices such as generators, UPS’s, AC systems, door access, etc., but we could standardize our security procedures, testing and maintenance schedules, and vendors. There is something good about finding good suppliers and vendors that treat you right, and are large enough to handle multiple locations and larger projects.
With standardization of security cameras, for example, we can view all of our data centers at the same time from any location 24×7, allowing us better utilization of our security staff.
We are also very fortunate to have our on staff of electrical and mechanical experts. They know our equipment, and can perform preventative maintenance daily, as well as fix them if they break – and do it any day or time that it happens.
We are proud of our staff, and I can recall a recent event, where a fire broke out in one of our redundant UPS’s, just before midnight on a Monday evening. Our on site tech responded to an alarm in the electrical room, and was pushed back by the toxic smelling smoke, and waited for the fire department. Before the fire department allowed us to re-enter the area to check out what happened and respond to any customer issues, six of our ColoSpace maintenance crew and techs were on site ready to perform whatever tasks were necessary. I had arrived on site myself to see them arrive, and wait to go into action.
Fortunately, our remaining systems stayed in operation and we had a professional fire department that quickly isolated the damaged equipment, and did not need to press the EPO button. Through the SAS 70 audit procedures, they were prepared to enter our space, knew where our proper fire extinguishers were, knew where the clearly marked electric room was located, and we were able to monitor the activity of the firefighters for both ourselves and the command chief who were outside the building using our laptop computers.
I am very proud of our team, and we were able to redeploy a new UPS into the electric room, and remove the old one within 24 hours, without losing our redundant UPS. We know that events like this happen, no matter how much preventative maintenance is done, we just don’t know where or when they will happen. I can rest pretty easy, knowing how great our ColoSpace staff is at responding to any customer service issue or potential disaster, like the one we experienced.
We certainly learned a lot from the SAS 70 certification process, and I hope you can see why it is important to find out if your present provider has passed their audit? For more information about our services, please send us a note.
Comments