7

What kind of acceditations exist for a datacenter?

I am not asking about process accreditation. Not ITIL, not ISO 20000. I am asking about an accreditation for the datacenter itself.

As far as I can see there is "Uptime Institute". They are giving "Tier"s based on DC design and/or implementation.

Anyone else you know of ?

Improve this question

3 Answers 3

Reset to default
6

For people - http://www.cisco.com/web/learning/le3/le2/le41/le99/learning_certification_type_home.html

For DCs itself - http://ssae16.com/ (SSAE 16 is the U.S. successor to SAS70. ISAE 3402 is the International equivalent)

Although not a 'DC' accreditation directly, a lot of datacenters generally have PCI compliance accreditation (PCI DSS).

Improve this answer
5
  • 1
    That's for people, not datacenters.
    – mfinni
    Feb 6, 2012 at 15:14
  • oops good catch!
    – Cold T
    Feb 6, 2012 at 15:45
  • I don't believe a DC can be PCI compliant - I understand PCI-DSS compliance to also require user training, security controls (access, physical, and data), process & procedure, etc. Securing the DC is part of attaining compliance, but you could still stick an insecure server in there and thus not be PCI compliant.
    – mfinni
    Feb 6, 2012 at 16:16
  • correct mfinni, OP was asking for different types of accreditation, hence i added that it was not directly a DC accreditation but rather 'add-value' to DC
    – Cold T
    Feb 6, 2012 at 16:19
  • SSAE16 and ISAE 3402 are still "process" certifications. As they are usually audits of the data center's controls and processes. They do not dictate specific controls like Uptime Institute does (e.g. multiple power providers). However, it is still very useful as it gives a third-party auditor's opinion of the controls in place.
    – Doug Luxem
    Mar 19, 2012 at 16:49
3

Look into SAS 70 Compliance if you want to host 'high value' resources in said Data Center.

Basic Overview:

http://www.sas70.us.com/industries/data-center-colocations.php

Improve this answer
2

There is a certification for a "secure data centre" by TÜV Saarland. They have TIER-style criteria as well, salted with some additions from the German BSI (federal agency for IT security).

TÜV INTERCERT is a subsidiary apparently marketing an internationalized version of this certificate, a couple of published presentation slides have some more details.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .