Expert Advice Community

Guest

Is equipment in data center to be considered as assets or controls?

  Quote
Guest
Guest user Created:   Jan 12, 2016 Last commented:   Jan 12, 2016

Is equipment in data center to be considered as assets or controls?

I got a question in relation to Information Security. If you own your own data centre, would you consider data centre controls such as fire suppression system, UPS, power generators, humidity controls as assets (for the purpose of risk assessment)? Or would you consider them as controls implemented to mitigate risk of system availability due to fire, power outage ?
0 0

Assign topic to the user

ISO 27001 RISK ASSESSMENT AND TREATMENT REPORT

Document the results of the risk management process.

ISO 27001 RISK ASSESSMENT AND TREATMENT REPORT

Document the results of the risk management process.

Guest
DejanK Jan 12, 2016

Answer:

Theoretically, you could consider this equipment as controls only, but to be on the safe side you should consider them as assets, because that way you will be able to assess the risks related to them in a much better way.

For instance, if you considered power generator as an asset, through the risk assessment you might realize that it is not regularly maintained, that the people operating it are not trained, etc. - you probably wouldn't realize such information if you considered the power generator only as a control.

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jan 12, 2016

Jan 12, 2016