Server Room Audit

• Document No.

• Client / Site

• Conducted on

  Date

• Prepared by

• Location
  Address

• Personnel

• Where "NO" is answered to a question, you will be presented with an additional field where further comments can be made in addition to the ability to attach an image related to the issue.

Physical Security

• There are no external windows

  Yes

  No

  N/A

• External windows are a potential security threat. These should be protected from human entry and damage from debris during a cyclone that would enable rain to enter the room.

• Are all windows fitted with Cyclone/security screens

  Yes

  No

  N/A

• Are all doors solid core construction

  Yes

  No

  N/A

• Was the door closed and locked on arrival

  Yes

  No

  N/A

• Does the server room door have a clearly visible sign indicated that access is restricted to authorised persons only

  Yes

  No

  N/A

• Is there a form of controlled entry to the server room, such as card reader.

  Yes

  No

  N/A

• Have the audit or access control lists been checked for unauthorised persons having access to the room. Indicate any persons with access that should not have.

  Yes

  No

  N/A

• Only authorised persons had access to the server room

  Yes

  No

  N/A

• Is the server monitored by CCTV

  Yes

  No

  N/A

• CCTV located where

  Select External building Door access Interal to room

  • External building
  • Door access
  • Interal to room

• Only access to room is through secured room/building

  Yes

  No

  N/A

• Does the building have 24 hour security

  Yes

  No

  N/A

Building Facilities

• Does the server room have backup power

  Yes

  No

  N/A

• What is the run time of the generator

  Yes

  No

  N/A

• When was the generator last tested

  Date

• Does the server room have a UPS installed

  Yes

  No

  N/A

• Record Brand, serial number etc

• UPS run time

• Date UPS last tested

  Date

• Are there any issues

  Yes

  No

  N/A

• Does server room have adequate air conditioning

  Yes

  No

  N/A

• Is there a fire suppression system

  Yes

  No

  N/A

• Is the suppression system gas or water based

  Yes

  No

  N/A

• Date system last tested

  Date

• Does the room have adequate fire and environment monitoring in place

  Yes

  No

  N/A

• Date last tested

  Date

• Is server room on ground floor of building

  Yes

  No

  N/A

• Is the server floor higher than the floor outside of room

  Yes

  No

  N/A

• There is potential for water from fire sprinklers, localised flooding or cyclone/rain to enter the room to enter the server room. Servers should be on raised platform or room should have a sump drainage system.

• Is electrical and electronic equipment on raised pedestals

  Yes

  No

  N/A

• Is the telephone extension in the room

  Yes

  No

  N/A

• What is the telephone number.

• Is the server room free of fire hazard materials such as cardboard boxes and paper

  Yes

  No

  N/A

ICT Infrastructure

• Racks should be secured to ensure they cannot be knocked over. Are the racks secured against mild seismic activity

  Yes

  No

  N/A

• Is adequate cabinet security enforced.

  Yes

  No

  N/A

• All servers have front and rear doors fitted

  Yes

  No

  N/A

• Server doors closed and locked

  Yes

  No

  N/A

• Is there sufficient space between racks and walls to enable doors to be opened and work to be undertaken

  Yes

  No

  N/A

• What percentage of the racks capacity is currently being utilized, in precent

• Is there space for additional cabinets

  Yes

  No

  N/A

• Is the cabling organised and clearly labelled

  Yes

  No

  N/A

• Are the servers secured by passwords and not open for unauthorised persons to access them

  Yes

  No

  N/A

• Are the servers clearly labelled

  Yes

  No

  N/A

• List the servers present

Disaster Recovery

• Is there an up to date list of ICT contacts in the server room

  Yes

  No

  N/A

• Are Backup tapes stored in the server room

  Yes

  No

  N/A

• Are the tapes stored in a fire proof safe

  Yes

  No

  N/A

• Is the backup tape safe closed and locked

  Yes

  No

  N/A

Overall Assessment

• Overall assessment of the rooms physical security where 0 is poor and 10 is excellent

• Overall assessment of the rooms physical facilities where 0 is poor and 10 is excellent

  Off

  On

• Overall assessment of the ICT infrastructure where 0 is poor and 10 is excellent

  Off

  On

• Additional Comments