Question HLDC-05

Do you have physical access control and video surveillance to prevent/detect unauthorized access to your data center?

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

State plans to prevent and detect unauthorized access to your data center.

Answering "YES"

Describe how you prevent and detect unauthorized access to your data center.

Reason for Question

It is important to physically protect and monitor an infrastructure. The purpose of this question is to determine that appropriate protections are in place at a vendor's data center.

Follow-Up Inquiries

If a vendor answers unsatisfactorily, follow up with questions about their physical infrastructure strategy (why they are self hosting), geographic redundancy (to determine if the data center is colocated with staff), and any compensating controls they may have in place.

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]