Yet some DCs don't have HVAC or generators, and it is perfectly reasonable they don't. Point 2 of the OP indicates he was after what areas/reasons there were such that CCTV is/was a necessity, and/or places where it isn't. Seems doing a case study with only the former and no input re the later isn't going to be a very complete case study (probably like the ones the PCI DSS guys do).<br>
<br><div class="gmail_quote">On Mon, Dec 3, 2012 at 10:49 AM, Bevan Slattery <span dir="ltr"><<a href="mailto:bevan@slattery.net.au" target="_blank">bevan@slattery.net.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="font-size:14px;font-family:Calibri,sans-serif;word-wrap:break-word"><div>Yes – you're right it's an arse cover insurance thing, the same as needing a front door, HVAC, generators or a roof. Sheesh.</div>
<div><br></div><div>[b]</div><div><br></div><span><div style="border-right:medium none;padding-right:0in;padding-left:0in;padding-top:3pt;text-align:left;font-size:11pt;border-bottom:medium none;font-family:Calibri;border-top:#b5c4df 1pt solid;padding-bottom:0in;border-left:medium none">
<div class="im"><span style="font-weight:bold">From: </span> Joshua D'Alton <<a href="mailto:joshua@railgun.com.au" target="_blank">joshua@railgun.com.au</a>><br></div><span style="font-weight:bold">Date: </span> Monday, 3 December 2012 9:30 AM<div class="im">
<br><span style="font-weight:bold">To: </span> "<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>" <<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>><br>
<span style="font-weight:bold">Subject: </span> Re: [AusNOG] [SPAM] Re: Is CCTV a Necessity in a Data Centre?<br><span style="font-weight:bold">Resent-From: </span> Bevan Slattery <<a href="mailto:bevan.slattery@nextdc.com" target="_blank">bevan.slattery@nextdc.com</a>><br>
</div></div><div><br></div><blockquote style="BORDER-LEFT:#b5c4df 5 solid;PADDING:0 0 0 5;MARGIN:0 0 0 5"><div><div class="h5">So as alluded to before, it seems to be an Insurance (as in PCI ./insurance policies) and/or ass-covering utility. Perhaps not a necessity in every DC?<br>
<br><div class="gmail_quote">On Mon, Dec 3, 2012 at 10:22 AM, Mark Andrews <span dir="ltr"><<a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><br>
In message <<a href="mailto:CAMtDJDKK6Ka3Hgv8Yx%2Btdo-yFLVGWEiJpt8rhAO_Pk78qRvPpA@mail.gmail.com" target="_blank">CAMtDJDKK6Ka3Hgv8Yx+tdo-yFLVGWEiJpt8rhAO_Pk78qRvPpA@mail.gmail.com</a>>, "Joshua D'Alton" writes:<br>
><br>
> Given I replied to you originally thinking you were replying privately vs<br>
> the list, I think it is obvious that the human element is really key, not<br>
> things like CCTV ;P<br>
><br>
> Anyway, I'm sure CCTV is essential for things like PCI, to meet the BS red<br>
> tape, but with regards to the OP post generally, so far we've only heard<br>
> political/red-tape reasons.<br><br></div>No. It is one method of meeting the standard. The *old* standard<br>
only had CCTV.<br><br>
Mark<br><br><a href="https://www.pcisecuritystandards.org/documents/pci_dss_v2.pdf" target="_blank">https://www.pcisecuritystandards.org/documents/pci_dss_v2.pdf</a><br><br>
9.1.1 Use video cameras and/or access control mechanisms to monitor<br>
individual physical access to sensitive areas. Review collected<br>
data and correlate with other entries. Store for at least three<br>
months, unless otherwise restricted by law. Note: ―Sensitive areas‖<br>
refers to any data center, server room or any area that houses<br>
systems that store, process, or transmit cardholder data. This<br>
excludes the areas where only point-of-sale terminals are present,<br>
such as the cashier areas in a retail<br><span><font color="#888888"><br>
--<br>
Mark Andrews, ISC<br>
1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
PHONE: <a href="tel:%2B61%202%209871%204742" value="+61298714742" target="_blank">+61 2 9871 4742</a> INTERNET: <a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a><br></font></span></blockquote>
</div><br></div></div><div class="im">
_______________________________________________
AusNOG mailing list
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</div></blockquote></span></div>
</blockquote></div><br>