Its a bit like airport security; you have to have it so it looks like you are secure, but in reality anyone wanting to do something malicious will firstly be able to still do it, and secondly probably get away with it.<div>
<br></div><div>Looking at PCI DSS, while the costs for CCTV are fairly insignificant, it is as laughable when compared to the tens of billions lost as it is the number of hijackings prevented.</div><div><br></div><div>The $30 million stolen recently in Australia by a Romanian ring who had 0 physical access to Australia let alone a rack in a DC is a fairly poignant example.<br>
<br><div class="gmail_quote">On Sun, Dec 2, 2012 at 7:15 PM, Chris Ricks <span dir="ltr"><<a href="mailto:chris.ricks@securepay.com.au" target="_blank">chris.ricks@securepay.com.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
CCTV is a requirement for us, given requirement 9 of PCI DSS. <br><br>In one of our locations, we have cameras in our rack and in another we have cameras in our cage facing inwards.<div class="HOEnZb"><div class="h5"><br>
<br>Matt Perkins <<a href="mailto:matt@spectrum.com.au" target="_blank">matt@spectrum.com.au</a>> wrote:<br><br>
<div><font face="Arial"><span><br>
a) Is CCTV (recording) a necessity within a data centre? <br>
<br>
It's a requirement of our insurance company so yes.<br>
<br>
b) Would you feel it's appropriate if a data center provider
didn't have CCTV as part of their service provision and soly
relied on physical access logs for physical security auditing?
<br>
<br>
No there is no due diligence, No there is no backup. That is
a physical log is one form of security but it has no backup
cctv provides a backup. <br>
<br>
c) Would you state that CCTV is simply implied as a standard
inclusion when it comes to the provision of data centre
services?
<br>
<br>
Nothing is implied or standard. Most customers worth their
salt will send you the normal security DD questionnaire. <br>
<br>
Matt.<br>
<br>
<br>
<br>
</span></font>On 2/12/12 12:38 PM, Chris Macko wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr" align="left"> </div>
<div> </div>
<div align="left">
<table align="left" border="0" cellpadding="0" cellspacing="0" width="740">
<tbody>
<tr>
<td valign="top" width="10"> </td>
<td valign="top" width="740">
<table border="0" cellpadding="0" cellspacing="0" width="740">
<tbody>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" height="100" width="239">
<tbody>
<tr>
<td valign="top"><br>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" width="740">
<tbody>
<tr>
<td width="75"> </td>
<td width="668">
<p><font face="Arial">Hi<span> Matt,<br>
<br>
Thanks for your feedback, if you
have the time, I'd really
appreciate if you could provide
your responses to the initial
questions. I would like to review
the industry belief, whilst I have
my own experiences and beliefs, my
own feelings are insufficient to
solely use in my case study and
thus it is necessary for me to
consider the broad industry
responses and beliefs.
<br>
<br>
Rather than just taking the
queries to my direct colleagues
(who may be inclined to think the
way I do, given that birds of a
feather flock together), I'm being
thorough and taking onboard the
comments from the complete
industry.
<br>
<br>
Regarding logo, this is just an
email signature, we started off as
a design agency so aesthetic
design is important to us. I've
removed our logo for you on this
response.</span></font></p>
<p><font face="Arial">Kind Regards,</font></p>
<p><font face="Arial"><b>Chris</b> Macko<br>
<strong><font>Managing
Director</font></strong><br>
<font color="#0066cc" size="1"><b><span>Interhost
Pacific</span></b><span> Pty Ltd t/a
Intervolve</span></font><span><font color="#cccccc" size="1"><font color="#999999">
</font></font></span></font></p>
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td height="11" width="20%"><font face="Arial" size="1"><font color="#cccccc" face="Arial, Helvetica,
sans-serif"><font color="#999999"><b>Support
Phone</b></font></font></font></td>
<td height="11"><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica, sans-serif"><font color="#999999">1300 664
574 / <a href="tel:%2B61%208%208260%204237" value="+61882604237" target="_blank">+61 8 8260 4237</a></font></font></font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica, sans-serif"><font color="#999999"><b>Sales
Phone</b></font></font></font></td>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica, sans-serif"><font color="#999999">1300 664
574</font></font></font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica, sans-serif"><font color="#999999"><b>Accounts
Phone</b></font></font></font></td>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica, sans-serif"><font color="#999999">+61 8 8260
4237</font></font></font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica, sans-serif"><font color="#999999"><b>Office Fax</b></font></font></font></td>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica, sans-serif"><font color="#999999">+61 8 8260
4312</font></font></font></td>
</tr>
<tr>
<td height="2"><font size="1"> </font></td>
<td height="2"><font size="1"> </font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#999999" face="Arial,
Helvetica, sans-serif"><b>Sales Email</b></font></font></td>
<td><font face="Arial" size="1"><font color="#0066cc" face="Arial,
Helvetica, sans-serif"><a href="mailto:sales@intervolve.com.au" target="_blank"><font color="#0066cc">sales@intervolve.com.au</font></a></font></font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#999999" face="Arial,
Helvetica, sans-serif"><b>Support
Email</b></font></font></td>
<td><font face="Arial" size="1"><font color="#0066cc" face="Arial,
Helvetica, sans-serif"><a href="mailto:support@intervolve.com.au" target="_blank"><font color="#0066cc">support@intervolve.com.au</font></a></font></font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#999999" face="Arial,
Helvetica, sans-serif"><b>Accounts
Email</b></font></font></td>
<td><font face="Arial" size="1"><font color="#0066cc" face="Arial,
Helvetica, sans-serif"><a href="mailto:accounts@intervolve.com.au" target="_blank"><font color="#0066cc">accounts@intervolve.com.au</font>
</a></font></font></td>
</tr>
<tr>
<td><font size="1"> </font></td>
<td><font size="1"> </font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font face="Arial, Helvetica,
sans-serif"><font color="#999999"><b>Website</b></font></font></font></td>
<td><font face="Arial" size="1"><font face="Arial, Helvetica,
sans-serif"><font color="#999999"><a href="http://www.intervolve.com.au/" target="_blank"><font color="#0066cc">www.<b>intervolve</b>.com.au</font></a></font></font></font></td>
</tr>
<tr>
<td><font size="1"> </font></td>
<td><font size="1"> </font></td>
</tr>
<tr>
<td><font size="1"> </font></td>
<td><font size="1"> </font></td>
</tr>
<tr>
<td colspan="2" height="2"><font color="#999999" face="Arial, Helvetica,
sans-serif" size="1">This
email contains information
that is confidential to the
intended recipient. It may
also contain information,
which is subject to legal
privilege. If you are not the
intended recipient, you must
not use, pass on or copy this
message. We also ask that you
notify the sender by email or
telephone and destroy the
original message. Thank you.</font></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
<br style="CLEAR:both">
<div> </div>
<br>
<div dir="ltr" align="left" lang="en-us">
<hr>
<font face="Tahoma"><b>From:</b>
<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>
[<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">mailto:ausnog-bounces@lists.ausnog.net</a>]
<b>On Behalf Of </b>Matt Perkins<br>
<b>Sent:</b> Sunday, 2 December 2012 11:51 AM<br>
<b>To:</b> <a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a><br>
<b>Subject:</b> Re: [AusNOG] [SPAM] Re: Is CCTV a Necessity in
a Data Centre?<br>
</font><br>
</div>
<div>Skeeve,<br>
I saw a system once that took stills out of the rack when a
reed on the door was triggered. So simply taking a record of
people who opened the door so it could be perhaps more innocent.
Im not sure a camera looking out of the rack would be that
useful and sure people may be upset about there privacy. We have
a no camera/photo in our center policy for customers and our
CCTV monitors the general floor and ingress and egress points.
It would be only scrutinized in the event of some sort of
security breach any way. To the broader issue of cctv. Well
it's so cheap who would not put it in. Compared to the other
facility costs. UPS/GEN Fire etc etc.
<br>
<br>
It's a strange question Chris could you give us some background
to why ask? You cant help but notice a big logo at the start of
your email....
<br>
<br>
<br>
<br>
2/12/12 11:59 AM, Skeeve Stevens wrote:<br>
</div>
<blockquote type="cite">
Chris,
<div><br>
</div>
<div>I think CCTV is important... but you have to ask a more
Micro questions... where?</div>
<div><br>
</div>
<div>Ingress/Egress, definitely. Every rack? I don't think so.
As long as you can verify who went in and out, and where they
went... i.e. which room, then you are fine.</div>
<div><br>
</div>
<div>No one wants to be constantly watched as they do their job,
and let's be honest here... video of an engineer sitting on
the floor typing on a laptop, or inside a rack playing with
things, isn't exactly going to give you much information about
what they are doing, and anything it does, is unlikely to be
in context.</div>
<div><br>
</div>
<div>I've seen people even have cameras in their rack looking
out... never sure what that was for. I used to have one in a
rack opposite where I used to regularly work in Global Switch,
so I just stuck a bit of paper over it. No idea whose it was,
but they didn't have a right to film me doing my work. It is
also illegal since they don't have a sign saying they are
doing it, and I am sure they don't have a
covert surveillance warrant.</div>
<div><br>
</div>
<div>Reference: <a href="http://www.legislation.nsw.gov.au/fullhtml/inforce/act+47+2005+FIRST+0+N" target="_blank">http://www.legislation.nsw.gov.au/fullhtml/inforce/act+47+2005+FIRST+0+N</a></div>
<div><br>
</div>
<div>When it comes to DC's, I am not sure what defines a
workplace however... and surveillance when people have cameras
inside their racks looking out, may be illegal.</div>
<div><br>
</div>
<div>Essentially, if you can't trust the DC's security, you
probably shouldn't be using that DC.</div>
<div><br>
</div>
<div>Who went where, most importantly, when, is all you need.</div>
<div><br>
</div>
<div>...Skeeve<br>
<div>
<div><font face="Calibri"><b><br>
<br>
</b></font></div>
<div><b style="FONT-SIZE:13px;FONT-FAMILY:Calibri">Skeeve
Stevens, CEO - </b><span style="FONT-SIZE:13px;FONT-FAMILY:Calibri">eintellego Pty Ltd</span></div>
<div>
<div style="FONT-FAMILY:Calibri,sans-serif"><span style="FONT-SIZE:13px;FONT-FAMILY:Calibri"><a href="mailto:skeeve@eintellego.net" target="_blank">skeeve@eintellego.net</a> ; <a href="http://www.eintellego.net/" target="_blank">www.eintellego.net</a></span><span style="FONT-SIZE:13px;COLOR:rgb(127,0,127)"><font style="COLOR:rgb(0,0,0)" color="#002060">
<p style="MARGIN:0px;FONT-FAMILY:Calibri">Phone:
1300 753 383; Cell <a href="tel:%2B61%20%280%29414%20753%20383" value="+61414753383" target="_blank">+61 (0)414 753 383</a> ; <a>skype://skeeve</a></p>
<p style="MARGIN:0px;FONT-FAMILY:Calibri"><a href="http://facebook.com/eintellego" target="_blank">facebook.com/eintellego</a> ; <a href="http://linkedin.com/in/skeeve" target="_blank">linkedin.com/in/skeeve</a> </p>
<p style="MARGIN:0px;FONT-FAMILY:Calibri"><a href="http://twitter.com/networkceoau" target="_blank">twitter.com/networkceoau</a> ;
blog: <a href="http://www.network-ceo.net/" target="_blank">www.network-ceo.net</a></p>
</font></span></div>
</div>
<div>
<div style="FONT-FAMILY:Calibri,sans-serif">
<div><span style="FONT-SIZE:13px;COLOR:rgb(127,0,127)">
<div><span style="FONT-SIZE:13px;COLOR:rgb(127,0,127)"><img><br>
</span></div>
The Experts Who The Experts Call</span></div>
<div style="FONT-SIZE:14px;COLOR:rgb(127,0,127)">
<div><span style="FONT-SIZE:13px;COLOR:rgb(0,32,96)">Juniper - Cisco – IBM</span><span style="FONT-SIZE:13px;COLOR:rgb(0,32,96)"> </span><span style="FONT-SIZE:13px;COLOR:rgb(0,32,96)">-
Brocade - Cloud</span></div>
<div>
<div><span style="FONT-SIZE:13px;COLOR:rgb(0,32,96)">-----</span></div>
<div style="FONT-SIZE:small;COLOR:rgb(0,0,0)"><font color="#002060">Check out our Juniper promotion
website for Oct/Nov! </font><a style="FONT-SIZE:13px;FONT-FAMILY:Calibri" href="http://eintellego.mx/" target="_blank">eintellego.mx</a></div>
<div style="FONT-SIZE:small;COLOR:rgb(0,0,0)"><span style="FONT-SIZE:13px;FONT-FAMILY:Calibri">Free
Apple products during this promotion!!! </span></div>
</div>
</div>
</div>
</div>
<br>
<br>
<br>
<div class="gmail_quote">On Sun, Dec 2, 2012 at 11:18 AM,
Chris Macko <span dir="ltr">
<<a href="mailto:cmacko@intervolve.com.au" target="_blank">cmacko@intervolve.com.au</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT:1ex;MARGIN:0px 0px 0px 0.8ex;BORDER-LEFT:#ccc 1px solid">
<div>
<div> </div>
<div> </div>
<div align="left">
<table align="left" border="0" cellpadding="0" cellspacing="0" width="740">
<tbody>
<tr>
<td valign="top" width="10"> </td>
<td valign="top" width="740">
<table border="0" cellpadding="0" cellspacing="0" width="740">
<tbody>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" height="100" width="239">
<tbody>
<tr>
<td valign="top"><br>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" width="740">
<tbody>
<tr>
<td width="75"> </td>
<td width="668">
<p><font face="Arial">Hi<span>
All,<br>
<br>
I'm performing a small
case study and would
really appreciate if
you're able to provide
your feedback in
relation to the
following questions
regarding CCTV within
a data centre;<br>
<br>
a) Is CCTV (recording)
a necessity within a
data centre? <br>
b) Would you feel it's
appropriate if a data
centre provider didn't
have CCTV as part of
their service
provision and soly
relied on physical
access logs for
physical security
auditting?
<br>
c) Would you state
that CCTV is simply
implied as a standard
inclusion when it
comes to the provision
of data centre
services?
<br>
<br>
My personal experience
is that CCTV is
necessary within data
centre services in
order to investigate
potential physical
security breaches in
events where physical
access logs don't
provide the necessary
information being
investigated. I also
feel that a data
centre without CCTV
would be akin to a
human without oxygen,
in that both co-exist
and are co-dependent.<br>
<br>
I would however really
appreciate your
thoughts and feedback.
Thank you! <br>
<br>
</span></font><font face="Arial">Kind
Regards,</font></p>
<p><font face="Arial"><b>Chris</b>
Macko<br>
<strong><font size="-0">Managing
Director</font></strong><br>
<font color="#0066cc" size="1"><b><span>Interhost
Pacific</span></b><span>
Pty Ltd t/a
Intervolve</span></font><span><font color="#cccccc" size="1"><font color="#999999">
</font></font></span></font></p>
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td height="11" width="20%"><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica,
sans-serif"><font color="#999999"><b>Support Phone</b></font></font></font></td>
<td height="11"><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica,
sans-serif"><font color="#999999">1300 664 574 / <a href="tel:%2B61%208%208260%204237" value="+61882604237" target="_blank">+61 8 8260 4237</a></font></font></font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica,
sans-serif"><font color="#999999"><b>Sales Phone</b></font></font></font></td>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica,
sans-serif"><font color="#999999">1300 664 574</font></font></font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica,
sans-serif"><font color="#999999"><b>Accounts Phone</b></font></font></font></td>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica,
sans-serif"><font color="#999999"><a href="tel:%2B61%208%208260%204237" value="+61882604237" target="_blank">+61 8 8260 4237</a></font></font></font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica,
sans-serif"><font color="#999999"><b>Office Fax</b></font></font></font></td>
<td><font face="Arial" size="1"><font color="#cccccc" face="Arial,
Helvetica,
sans-serif"><font color="#999999"><a href="tel:%2B61%208%208260%204312" value="+61882604312" target="_blank">+61 8 8260 4312</a></font></font></font></td>
</tr>
<tr>
<td height="2"><font size="1"> </font></td>
<td height="2"><font size="1"> </font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#999999" face="Arial,
Helvetica,
sans-serif"><b>Sales
Email</b></font></font></td>
<td><font face="Arial" size="1"><font color="#0066cc" face="Arial,
Helvetica,
sans-serif"><a href="mailto:sales@intervolve.com.au" target="_blank"><font color="#0066cc">sales@intervolve.com.au</font></a></font></font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#999999" face="Arial,
Helvetica,
sans-serif"><b>Support
Email</b></font></font></td>
<td><font face="Arial" size="1"><font color="#0066cc" face="Arial,
Helvetica,
sans-serif"><a href="mailto:support@intervolve.com.au" target="_blank"><font color="#0066cc">support@intervolve.com.au</font></a></font></font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font color="#999999" face="Arial,
Helvetica,
sans-serif"><b>Accounts
Email</b></font></font></td>
<td><font face="Arial" size="1"><font color="#0066cc" face="Arial,
Helvetica,
sans-serif"><a href="mailto:accounts@intervolve.com.au" target="_blank"><font color="#0066cc">accounts@intervolve.com.au</font>
</a></font></font></td>
</tr>
<tr>
<td><font size="1"> </font></td>
<td><font size="1"> </font></td>
</tr>
<tr>
<td><font face="Arial" size="1"><font face="Arial,
Helvetica,
sans-serif"><font color="#999999"><b>Website</b></font></font></font></td>
<td><font face="Arial" size="1"><font face="Arial,
Helvetica,
sans-serif"><font color="#999999"><a href="http://www.intervolve.com.au/" target="_blank"><font color="#0066cc">www.<b>intervolve</b>.com.au</font></a></font></font></font></td>
</tr>
<tr>
<td><font size="1"> </font></td>
<td><font size="1"> </font></td>
</tr>
<tr>
<td><font size="1"> </font></td>
<td><font size="1"> </font></td>
</tr>
<tr>
<td colspan="2" height="2"><font color="#999999" face="Arial,
Helvetica,
sans-serif" size="1">This
email contains
information that
is confidential to
the intended
recipient. It may
also contain
information, which
is subject to
legal privilege.
If you are not the
intended
recipient, you
must not use, pass
on or copy this
message. We also
ask that you
notify the sender
by email or
telephone and
destroy the
original message.
Thank you.</font></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
<br style="CLEAR:both">
<div> </div>
</div>
<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
AusNOG mailing list
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<br>
<br>
</blockquote>
<br>
<br>
</div></div><br>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br></blockquote></div><br></div>