Just as a sidenote, if we have all always had CCTV then we can't even look at our experiences as relevant to say 'we never got any benefit from it' since we can't measure what it prevented. It'd be interesting to see what things were like in an unmonitored DC. I wonder how honest people would stay if they saw a cable they needed in someone else's rack, sitting unused. I would feel very uncomfortable leaving my kit somewhere that no-one could see it.<div>
<br></div><div>IMO CCTV is like a seatbelt or a bike helmet. It will spend the vast majority of its time doing nothing and that will lead some people to think that you do not need it.</div><div><br></div><div>But when you need it, you <i>really</i> need it. And I can think of at least a few times when I've really needed it.</div>
<div class="gmail_extra"><br clear="all">--<br>Christopher Pollock,<br>io Networks Pty Ltd.<div>e. <a href="mailto:chris@ionetworks.com.au" target="_blank">chris@ionetworks.com.au</a><br>p. 1300 1 2 4 8 16</div><div>d. 07 3188 7588</div>
<div>m. 0410 747 765</div><div>skype: christopherpollock</div><div><a href="http://twitter.com/chrisionetworks" target="_blank">twitter.com/chrisionetworks</a></div><div><div><a href="http://www.ionetworks.com.au" target="_blank">http://www.ionetworks.com.au</a><br>
In-house, Outsourced.</div></div><br>
<br><br><div class="gmail_quote">On Mon, Dec 3, 2012 at 2:19 PM, Joshua D'Alton <span dir="ltr"><<a href="mailto:joshua@railgun.com.au" target="_blank">joshua@railgun.com.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Yet some DCs don't have HVAC or generators, and it is perfectly reasonable they don't. Point 2 of the OP indicates he was after what areas/reasons there were such that CCTV is/was a necessity, and/or places where it isn't. Seems doing a case study with only the former and no input re the later isn't going to be a very complete case study (probably like the ones the PCI DSS guys do).<br>
<br><div class="gmail_quote">On Mon, Dec 3, 2012 at 10:49 AM, Bevan Slattery <span dir="ltr"><<a href="mailto:bevan@slattery.net.au" target="_blank">bevan@slattery.net.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="font-size:14px;font-family:Calibri,sans-serif;word-wrap:break-word"><div>Yes – you're right it's an arse cover insurance thing, the same as needing a front door, HVAC, generators or a roof. Sheesh.</div>
<div><br></div><div>[b]</div><div><br></div><span><div style="border-right:medium none;padding-right:0in;padding-left:0in;padding-top:3pt;text-align:left;font-size:11pt;border-bottom:medium none;font-family:Calibri;border-top:#b5c4df 1pt solid;padding-bottom:0in;border-left:medium none">
<div class="im">
<div><span style="font-weight:bold">From: </span> Joshua D'Alton <<a href="mailto:joshua@railgun.com.au" target="_blank">joshua@railgun.com.au</a>><br></div></div><span style="font-weight:bold">Date: </span> Monday, 3 December 2012 9:30 AM<div class="im">
<div>
<br><span style="font-weight:bold">To: </span> "<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>" <<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>><br>
<span style="font-weight:bold">Subject: </span> Re: [AusNOG] [SPAM] Re: Is CCTV a Necessity in a Data Centre?<br><span style="font-weight:bold">Resent-From: </span> Bevan Slattery <<a href="mailto:bevan.slattery@nextdc.com" target="_blank">bevan.slattery@nextdc.com</a>><br>
</div></div></div><div><br></div><blockquote style="BORDER-LEFT:#b5c4df 5 solid;PADDING:0 0 0 5;MARGIN:0 0 0 5"><div><div class="h5"><div><div>So as alluded to before, it seems to be an Insurance (as in PCI ./insurance policies) and/or ass-covering utility. Perhaps not a necessity in every DC?<br>
<br><div class="gmail_quote">On Mon, Dec 3, 2012 at 10:22 AM, Mark Andrews <span dir="ltr"><<a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><br>
In message <<a href="mailto:CAMtDJDKK6Ka3Hgv8Yx%2Btdo-yFLVGWEiJpt8rhAO_Pk78qRvPpA@mail.gmail.com" target="_blank">CAMtDJDKK6Ka3Hgv8Yx+tdo-yFLVGWEiJpt8rhAO_Pk78qRvPpA@mail.gmail.com</a>>, "Joshua D'Alton" writes:<br>
><br>
> Given I replied to you originally thinking you were replying privately vs<br>
> the list, I think it is obvious that the human element is really key, not<br>
> things like CCTV ;P<br>
><br>
> Anyway, I'm sure CCTV is essential for things like PCI, to meet the BS red<br>
> tape, but with regards to the OP post generally, so far we've only heard<br>
> political/red-tape reasons.<br><br></div>No. It is one method of meeting the standard. The *old* standard<br>
only had CCTV.<br><br>
Mark<br><br><a href="https://www.pcisecuritystandards.org/documents/pci_dss_v2.pdf" target="_blank">https://www.pcisecuritystandards.org/documents/pci_dss_v2.pdf</a><br><br>
9.1.1 Use video cameras and/or access control mechanisms to monitor<br>
individual physical access to sensitive areas. Review collected<br>
data and correlate with other entries. Store for at least three<br>
months, unless otherwise restricted by law. Note: ―Sensitive areas‖<br>
refers to any data center, server room or any area that houses<br>
systems that store, process, or transmit cardholder data. This<br>
excludes the areas where only point-of-sale terminals are present,<br>
such as the cashier areas in a retail<br><span><font color="#888888"><br>
--<br>
Mark Andrews, ISC<br>
1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
PHONE: <a href="tel:%2B61%202%209871%204742" value="+61298714742" target="_blank">+61 2 9871 4742</a> INTERNET: <a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a><br></font></span></blockquote>
</div><br></div></div></div></div><div class="im"><div>
_______________________________________________
AusNOG mailing list
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</div></div></blockquote></span></div>
</blockquote></div><br>
<br>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br></blockquote></div><br></div>