Data Center and Security

Onur Eroğlu
April 29, 2013

What priorities and corporate needs are important for the companies during data center investments?

Conveniences provided by developing technologies will not only be used by large-scale enterprises but also by the middle and small-scale enterprises actively. Therefore, investment needs for IT infrastructures are increasing in parallel. Since most of the company has webpages and mobile applications which enable internet sale, due to great success and return in social media advertisements, IT technologies and investments are vital for the companies in our era. Updating growing infrastructures and servers located in different locations, maintenance, security needs, management difficulties, additional costs bring up the need for central management of the systems. In addition to that, corporates which already have a data centre can make investments to provide 7/24 uninterrupted and safe service by backing up their data in multiple data centres.

How do companies proceed during transition period to data centre structure or development of such structures, do they have a strategic plan? What kind of guidance and consultancy you provide for them in this respect?

While companies make data centre investments, generally they require revealing their IT needs and meeting their requirements with proper solutions. As 4S Information Technologies, mostly we make “BUSINESS” oriented analysis in our services. Rather than finding answer for ‘How do we meet the requirement?’, we are trying to provide added value and high beneficiary services to the organizations by asking “What is the technological need of the organization and which is the most proper investment? In this framework, we are demonstrating technological solutions provided by our expert technical team and show realistic and correct solutions.  We are achieving successful projects by implementing our proven technological solutions. We provide consultancy and integration services with our expert staff within this scope including how the data centre should be located with respect to efficiency and security, height of internal environment, cooling of the environment, data centre management, security software provisions, device layout plans, necessary solutions for business continuity. Since data centre and security solutions that we have established within 4S Information Technologies have been developed in accordance with proven standards, the corporates that we serve have the competence to obtain necessary certifications.

Where are security applications located in data centres?

First of all, security in data centres is taken into consideration physically. For example, one of the most critical issues of data centre projects is location of data centre. During location selection, natural and physical risks and product and service supply problems should be identified. Similarly, further growth rate of the data centre should be taken into account. Wrong location may cause critical service interruptions and financial and emotional damages for the companies aiming at business continuity. For example, data centres near to airports, missile control areas and military zones can be affected by explosions, vibrations and service can be interrupted or entire data centre can be lost.  Similarly it is risky to locate data centres near to gas stations, thermal power plants.

The other important security application to be considered in data centres is information security. Recently, commercial companies and governmental institutions tend to use enormous amount of information to sustain their businesses.  Obtaining or modifying this information somehow may cause severe financial and reputational losses and service interruptions.  Basic concepts of information security are ‘Confidentiality’, ‘Integrity’ and ‘Availability”. In order to comply with all these categories, ‘Network Security’, ‘System Security’, ‘Application Security’, ‘Data Security’ and ‘Business Continuity’ subjects should be assessed individually and necessary solutions should be utilized.

How do companies evaluate their security priorities? Do they apply a policy compatible with their corporate security policies?

Since 2011, information security, hence data centre security, has become one of the most important agenda item in public organizations and institutions. Many institutions have commenced studies to comply with ISO 27001 Information Security Standard, they have made necessary modifications in their procedures and regulations.