Remember The Human Factor In Colocation Center Security
If you're considering using a colocation data center -- basically a warehouse where you can store your company's servers -- you know how important it is to have good physical security. But you also have to be sure the human element won't cause a problem. The best physical security in the world won't matter if employees aren't able to protect the data that they keep in their heads or in their own computers.
Keys, Keys Everywhere
When you look for colocation space, look at the space itself in person -- don't rely on online pictures, of course -- and when you're there, look at how the staff in the building treat door locks, where they leave their keys, and whether keys are left in filing cabinet locks, for example. Many companies like to point out that they have secure locks or that everything stays locked in cabinets, for example, but that means nothing if the employees don't use the locks.
If you are visiting and someone props open a normally locked door, for example, that's a warning sign, depending on why they left it open. If visitors can get physical access to employee-only sections of the building, for example, that's a sign that the employees are not paying attention to actually keeping the building and your information secure.
Just Plain Gullible
Ask about how phone and email requests for help are handled, too. Some colocation centers offer differing levels of technical support, such as restarting servers or doing minor maintenance. But there has to be a protocol in place to ensure that email and phone requests for information or service are not answered unless the company has verified (as much as it can without speaking to someone face to face) that the request came from a real customer. It's become so easy to forge emails and caller ID displays that there has to be a very thick layer of security surrounding any remote requests for help.
Visible Information
As you speak to the representatives who are helping you, look at where they put forms that have sensitive information, and glance at desks to see what's been left out. It's sad but true: Many times passwords are written down and left near a computer, or confidential forms are placed in a tray or pile out in the open. Even if that pile is at the other edge of the desk from where you're sitting, it would be easy for anyone to access if the employees left the office for whatever reason. Ensure that you go with a company that locks up confidential information.
As you search for a good colocation space, ask each company about their security and monitor the employees' behavior as they help you. Do not be afraid to say no to a company because you are uncomfortable with how someone there handled security. If you're looking for a colocation company near you, visit Cologix.