{"id":12448,"date":"2021-04-29T13:47:57","date_gmt":"2021-04-29T17:47:57","guid":{"rendered":"https:\/\/www.thesslstore.com\/blog\/?p=12448"},"modified":"2021-11-08T11:25:12","modified_gmt":"2021-11-08T16:25:12","slug":"what-is-data-center-security-6-ways-to-ensure-your-interests-are-protected","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/blog\/what-is-data-center-security-6-ways-to-ensure-your-interests-are-protected\/","title":{"rendered":"What Is Data Center Security? 6 Ways to Ensure Your Interests Are Protected"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\" id=\"h-protect-your-servers-and-data-with-these-data-center-security-best-practices-from-7-it-and-cybersecurity-experts\">Protect your servers and data with these data center security best practices from 7 IT and cybersecurity experts<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><em>Note: This article, which was originally published in 2020, has been updated to include related news &amp; media resources<\/em><\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Imagine that you have a stack of gold bars and you\u2019re responsible for protecting it. Would you leave it out in the open where any thief could get their hands on it, or would you keep it under lock and key?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This same analogy applies to your data center \u2014 a virtual goldmine of information \u2014 yet many companies choose to do the minimum when it comes to data center security. Your data center \u2014 the networked computer servers and devices that process, distribute and store your precious data \u2014 is a critical component of your organization\u2019s digital infrastructure. Data center security is the combination of policies, processes, procedures, and technologies that secure it from cyber attacks and other virtual threats.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So, what are the data security standards you should know to meet and maintain compliance? We\u2019ve consulted several IT and cybersecurity experts to pick their brains and share their data center security best practices.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s hash it out.<span id=\"newline\"><\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-the-importance-of-data-center-security-continues-to-grow\">The Importance of Data Center Security Continues to Grow<\/h2>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"640\" src=\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2020\/06\/data-center-security-physical-measures-1024x640.jpg\" alt=\"\" class=\"wp-image-12452 addshadow\" srcset=\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2020\/06\/data-center-security-physical-measures-1024x640.jpg 1024w, https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2020\/06\/data-center-security-physical-measures-300x188.jpg 300w, https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2020\/06\/data-center-security-physical-measures-768x480.jpg 768w, https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2020\/06\/data-center-security-physical-measures-1536x960.jpg 1536w, https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2020\/06\/data-center-security-physical-measures.jpg 1600w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>Data center security graphic: An example of a type of biometric-based physical security measure (fingerprint scanner) that you can use to restrict access to your data center.<\/figcaption><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">It\u2019s no surprise that the security of your data is crucial for any business. It\u2019s invaluable info that can make or break your business. Proprietary information such as intellectual property and trade secrets, as well as customers\u2019 personal and financial information are all examples of the types of data that might be found within a data center.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Intentional or accidental data exposure can lead to:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Reputational damage and loss of customer trust<\/strong> \u2014 If word gets out that you\u2019re not taking the necessary steps to protect your customers\u2019 data (or even your own intellectual property), why <em>should<\/em> they trust you?<\/li><li><strong>Noncompliance fines from industry regulations<\/strong> \u2014 There are several key regulations that have requirements related to data center security, including PCI DSS, HIPAA, GDPR, SAE 18 (formerly SAE 16), and ISO 27001: 2013.<\/li><li><strong>Financial damages and loss revenue<\/strong> \u2014 Downtime is a major concern for businesses and can result in significant revenue losses.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Shayne Sherman, CEO of <a rel=\"noreferrer noopener\" href=\"https:\/\/techloris.com\/\" target=\"_blank\">TechLoris<\/a>, says the importance of data center security can\u2019t be overstated and that it should be a top priority for every business. &nbsp;<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cTaking the time to make sure the building is secure, your employees are well-versed in cyber security prevention, and that you&#8217;re meeting compliance requirements goes a long way in protecting your assets from malicious actors.\u201d<\/em> <\/p><cite><strong>\u2014 Shayne Sherman, CEO of TechLoris<\/strong><\/cite><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">So, needless to say, you\u2019ll find yourself in hot water if any of this information winds up in the wrong hands. This is why you need to know some data center security best practices that you can put into action.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-tip-1-implement-data-center-physical-security-measures\">Tip #1: Implement Data Center Physical Security Measures<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When people think of the types of security measures that they have in place to protect their organization\u2019s data, they don\u2019t necessarily consider the <a href=\"https:\/\/resure.co\/blog\/where-physical-security-and-cyber-security-meet-and-work-together\/\">physical security<\/a> aspect. Why? They\u2019re often too preoccupied with concerns relating to data loss risks that stem from cyber attacks and data breaches.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, what companies may not realize is that physical security threats can be some of the most impactful. One such example would be the case of Anthony Levandowski, a <a href=\"https:\/\/www.theverge.com\/2020\/3\/19\/21187651\/anthony-levandowski-pleads-guilty-google-waymo-uber-trade-secret-theft-lawsuit\" target=\"_blank\" rel=\"noreferrer noopener\">former Google engineer who has plead guilty to stealing the company\u2019s trade secrets<\/a> and giving them to Uber.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">According to <a href=\"https:\/\/www.newyorker.com\/magazine\/2018\/10\/22\/did-uber-steal-googles-intellectual-property\">an article in the New Yorker<\/a>, Levandowski accessed Google\u2019s servers directly to carry out the theft:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cAccording to Google, a month before Levandowski resigned, he had plugged his work-issued laptop into a Google server and downloaded about fourteen thousand files, including hardware schematics. He transferred the files to an external drive and then wiped his laptop clean.\u201d<\/em><\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">There are a few main <a href=\"https:\/\/www.cisco.com\/c\/en\/us\/solutions\/data-center-virtualization\/what-is-a-data-center.html\" target=\"_blank\" rel=\"noreferrer noopener\">types of data centers<\/a> that an organization can have based on its needs and available resources:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Public cloud data center<\/strong> \u2014 This type of data center is one that\u2019s off premises and is hosted by public cloud providers such as IBM Cloud, Amazon Web Services (AWS), and other tech giants. There\u2019s a lot of debate within the industry about how secure these platforms are despite growing adoption, but many of those issues are at the customer level (such as server misconfigurations) and are not at the provider level.<\/li><li><strong>Private managed hosting data center<\/strong> \u2014 This type of data center is one in which you are sharing servers with other companies and organizations. This is great for companies that have limited tech expertise or can\u2019t afford a lot of capital expenditure costs up front. However, it\u2019s not necessarily the most secure option.<\/li><li><strong>Colocation data center<\/strong> \u2014 This type of data center is one in which a company shares space with other companies, but own their own severs and other equipment. This offers more protection for your data than managed hosting data centers because you own your own equipment and aren\u2019t sharing it with other organizations.<\/li><li><strong>On-site data center<\/strong> \u2014 This type of data center is one that you house within your own facility. Having an on-premises data center offers the greatest level of security but also has significantly higher operational costs than other data storage options.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">With each being so different, it means that the security needs of each type are different. So, what should be the first data center security consideration?<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"How Google Protects Your Data\" width=\"960\" height=\"540\" src=\"https:\/\/www.youtube.com\/embed\/TQoKFovvigI?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-location-location-location\">Location, Location, Location<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you\u2019re creating your own data center and aren\u2019t relying on a cloud or colocation data center, intentionally planning out the physical space of your data center is essential. This includes deciding whether you want your data center to be in a secluded location or a more populated area.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But what else should you keep in mind when planning a data center location in terms of security? Be conscientious of weather-related dangers and low-lying areas. (We&#8217;ve found that floodwaters and technology aren\u2019t a great mix.). Also be sure to watch out for hot geological zones that are earthquake prone.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you\u2019re going to build in a more populated area, you can <a rel=\"noreferrer noopener\" href=\"https:\/\/www.zdnet.com\/article\/how-to-hide-your-datacenter-in-plain-sight\/\" target=\"_blank\">hide your data center in plain sight<\/a> by making it blend in with its surroundings.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you\u2019re using a service provider\u2019s facility, check out the construction and location of their building. You can also request compliance reports to see how they measure up.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-key-data-center-physical-security-measures\">Key Data Center Physical Security Measures<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">But aside from the location, there are many other physical security considerations. Data center hardening can include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Reinforced concrete walls and structures that can protect the facility from external attacks<\/li><li>Server cabinets and cages that are bolted into the ground and secured with locks<\/li><li>Environmental controls that monitor and regulate temperature and humidity changes<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Mark Soto, owner of the cybersecurity and IT services company <a href=\"https:\/\/cybericus.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Cybericus<\/a>, is quick to state that although physical attacks aren\u2019t as common as cyber attacks, they\u2019re still very real threats to your data security.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cYou need to set up security&nbsp;measures around the data center to make sure that it&#8217;s secure. This can be either through a badge system or a pin pad to only allow certain people with access to these locations.&nbsp;&nbsp;<\/em><\/p><p><em>Be fully aware of the people that pass through the facility. As mentioned above, 30% of data breaches are due to internal users. You should be very careful as a company on who has access to the data center and what parts they have access to. This can involve anything from performing background checks on employees, and third party contractors who have access to your data center facilities.\u201d<\/em>&nbsp;<\/p><cite><strong>\u2014 Mark Soto, owner of Cybericus<\/strong><\/cite><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Ben Hartwig, a web operations executive at <a href=\"https:\/\/infotracer.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">InfoTracer<\/a>, says that you need to consider the physical design of your facility to truly gauge your data center security.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cA main concern is the building or facility design itself when it comes to physical security. Key points of physical security include 24\/7 video surveillance, metal detectors and on-site security guards, as well as layered security measures, security checkpoints, customized to reflect the sensitivity of the protected data, limited or single entry and exit points, and more.\u201d<\/em> <\/p><cite><strong>\u2014 Ben Hartwig, Web Operations Executive at InfoTracer<\/strong><\/cite><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Some types of data centers also have additional physical requirements such as those outlined by the Telecommunications Industry Association (TIA) in their data standards <a href=\"https:\/\/tiaonline.org\/what-we-do\/technology\/programs\/tia942certification\/\" target=\"_blank\" rel=\"noreferrer noopener\">ANSI\/TIA-942\/TIA-942A<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Hartwig also suggests taking traditional security measures to the next level. Some methods include using multifold access controls and enforcing specialized security methods in every area and room.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cEvery individually-secured zone should demand more than one form of identification and pass control, since not all employees ought to have access to every part of a data center.<\/em><\/p><p><em>Use access cards and identification badges, or other protection which includes scales that weigh visitors upon entering and exiting the premises, continuous background checks of authorized staff and biometric locks.\u201d<\/em> <\/p><cite><strong>\u2014 Ben Hartwig, Web Operations Executive at InfoTracer<\/strong><\/cite><\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-tip-2-monitor-and-restrict-not-just-physical-access-but-virtual-access-as-well\">Tip #2: Monitor and Restrict Not Just Physical Access But Virtual Access As Well<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">But securing your data requires more than just installing door locks and cameras. You actually need to monitor the digital access as well. Why? Of the data breaches reported in IBM and the Ponemon Institute\u2019s <a href=\"https:\/\/www.ibm.com\/security\/data-breach\" target=\"_blank\" rel=\"noreferrer noopener\">2019 Cost of a Data Breach Report<\/a>, 49% of them were identified as resulting human errors and system glitches and not cyber attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.thesslstore.com\/blog\/author\/rossthomas\/\">Ross Thomas<\/a>, IT administrator here at The SSL Store, says that one of the more obvious data center security best practices is to review the permissions that are set for any users who have access to your servers.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cPeriodic permission auditing is crucial to make sure that access is only delegated to those that need it. Root users can be very dangerous as they are able to make any changes or execute any code or processes. But, root users are necessary. Assigning processes, tasks, etc., to the correct user is the absolute safest way to delegate processes. When personnel leave an organization, there should be proper evaluation of their status in all systems to determine if they have access even if it is not through the front door.\u201d<\/em> <\/p><cite><strong>\u2014 Ross Thomas, IT administrator at The SSL Store<\/strong><\/cite><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">And if you weren\u2019t already concerned about phishing scams and password insecurities, you should be. <a rel=\"noreferrer noopener\" href=\"https:\/\/enterprise.verizon.com\/resources\/reports\/dbir\/\" target=\"_blank\">Verizon\u2019s 2020 Data Breach Investigations Report<\/a> (DBIR) shows that four in five hacking-related breaches involve brute force or the use of lost or stolen credentials.<\/p>\n\n\n\n\n\n<p class=\"wp-block-paragraph\">So, if you can\u2019t automatically trust that your users are who they claim to be, what\u2019s the solution?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Related<\/strong>: <em>Secure Your Website with a <a href=\"https:\/\/www.thesslstore.com\/comodo\/comodo-ssl-certificates.aspx\" target=\"_blank\" rel=\"noreferrer noopener\">Comodo SSL Certificate<\/a>.&nbsp;<\/em><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-adopt-a-zero-trust-approach\">Adopt a Zero Trust Approach<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sami Ullah, pre-sales manager at <a href=\"https:\/\/www.kualitatem.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Kualitatem Inc<\/a>., an independent software testing and information systems auditing company, says that organizations should implement a zero-trust architecture:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cThe Zero Trust Model treats every transaction, movement, or iteration of data as suspicious. It\u2019s one of the latest intrusion detection methods. The system tracks network behavior, and data flows from a command center in real time. It checks anyone extracting data from the system and alerts staff or revokes rights from accounts [if] an anomaly is detected.\u201d<\/em> <\/p><cite><strong>\u2014 Sami Ullah, pre-sales manager at Kualitatem Inc.<\/strong><\/cite><\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-tip-3-use-the-right-tools-to-secure-your-data-and-network\">Tip #3: Use the Right Tools to Secure Your Data and Network<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A strong data center security strategy is one that uses perimeter-based security tools to monitor and protect your network from internal and external threats. Part of this approach is to properly configure and <a href=\"https:\/\/www.thesslstore.com\/blog\/end-and-not-so-end-device-security-best-practices\/\">secure your endpoints<\/a>, networks, and firewalls (this is the heart of security).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vladlen Shulepov, CEO at the international software development company <a href=\"https:\/\/riseapps.co\/\" target=\"_blank\" rel=\"noreferrer noopener\">Riseapps<\/a>, highlights several of the key monitoring and detection tools that should be in your security arsenal:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cExternal threats are usually the worst enemy of a data center, so protective solutions are necessary. Intrusion detection systems, IP address monitoring, and firewalls are some of the most helpful tools to protect your data center from outside breaches and ensure its security.\u201d<\/em><\/p><cite><strong>\u2014 Vladlen Shulepov, CEO at Riseapps<\/strong><\/cite><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Ross Thomas, IT administrator at The SSL Store, says that using reverse proxies is also a great option. A reverse proxy acts like a front-line cache that accesses static and dynamic content rather than letting users directly access a webserver or database server for every request.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cAdding a reverse proxy to sit in front of a webserver is a good idea for security. It disassociates the public from directly accessing a webserver that contains production code or a means to get to valuable information, such as a database. It can also offload some of the processing and functionality to allow the primary server to operate at full (or near full) potential. A reverse proxy is not too different from a load balancer and can often be one in the same depending on the server structure (clustering, for example). In any event, it is a safe bet to protect valuable production code\/data.\u201d<\/em><\/p><cite><strong>\u2014 Ross Thomas, IT administrator at The SSL Store<\/strong><\/cite><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">If you want to further harden your data center\u2019s cyber defenses, you can (and should):<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Conduct regular audits of your assets, security management processes and access protocols.<\/li><li>Use network-level encryption to secure your data as it travels between endpoints and server-level encryption to protect the data when it\u2019s at rest. &nbsp;<\/li><li><a href=\"https:\/\/www.thesslstore.com\/blog\/4-ways-to-integrate-cyber-security-automation-within-your-enterprise\/\">Integrate automation<\/a> and security information and event management (SIEM) tools (or use a third-party service) to continually monitor logs and report on security events and threats.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-tip-4-keep-your-servers-and-systems-current\">Tip #4: Keep Your Servers and Systems Current<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">No one likes taking the time out of their day to run boring updates and to apply patching to their systems. After all, you have way more important things to do, right?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We\u2019re pretty sure that the owners of the <a href=\"https:\/\/www.kaspersky.com\/resource-center\/threats\/ransomware-wannacry\" target=\"_blank\" rel=\"noreferrer noopener\">230,000 computers that were affected by the WannaCry ransomware attacks<\/a> a few years ago would disagree. In those attacks, a hacker group used the NSA\u2019s EternalBlue exploit \u2014 which <a href=\"https:\/\/www.techrepublic.com\/article\/report-uks-nhs-ignored-patch-warnings-months-before-wannacry-leading-to-wide-scale-devastation\/\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft had patched but WannaCry victims hadn\u2019t applied to their machines<\/a> \u2014 to their advantage to take over computers at organizations and businesses around the world, including the U.K.\u2019s National Health System (NHS).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When manufacturers release patches, it\u2019s their way of filling in any security gaps that they\u2019ve discovered in their products. It\u2019s like patching a hole in your roof to prevent rain from pouring or leaking through. It\u2019s their way of fixing the vulnerability before a bad guy can exploit it and cause issues.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Simply put, patching and updating your systems can save you a lot of headaches in the long run:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cMake sure your servers remain patched and on the latest software releases. This is the easiest way to protect yourself from known vulnerabilities. Don\u2019t get breached because of something that\u2019s already had a fix.\u201d<\/em> <\/p><cite>\u2014 <strong>Jayant Shukla, CTO and Co-Founder, <a href=\"https:\/\/www.k2io.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">K2 Cyber Security<\/a><\/strong><\/cite><\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-tip-5-have-redundant-data-backups-and-infrastructure-in-place\">Tip #5: Have Redundant Data Backups and Infrastructure in Place<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">No matter how many times we talk about data backups, it never seems to be enough. You read in the headlines about how <a href=\"https:\/\/www.thesslstore.com\/blog\/cyber-attacks-hit-the-city-of-johannesburg-and-south-african-banks\/\">major city governments<\/a>, <a href=\"https:\/\/www.thesslstore.com\/blog\/cyber-attacks-are-killing-hospital-patients-could-cybercriminals-be-prosecuted-for-murder\/\">hospitals<\/a> and <a href=\"https:\/\/www.thesslstore.com\/blog\/ransomware-statistics\/\">businesses are left paralyzed by ransomware attacks<\/a> and other cyber attacks. Yet, for some reason, businesses choose to not take the appropriate precautions for creating redundant data backups.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Is it laziness? Maybe it\u2019s the \u201cit won\u2019t happen to me\u201d mindset. Regardless of the excuses why they shouldn\u2019t, the truth of the matter is that having redundant backups \u2014 both in terms of data and secondary infrastructure \u2014 in place can save you a lot of time, money, and headaches. When crap hits the fan \u2014 and, inevitably, it will \u2014 you\u2019ll wish that you\u2019d taken the time to prepare.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I think Hartwig summarizes this next point best:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cData security and data center security are inseparable. To store and protect data effectively, all data has to be strongly encoded during transfer and always monitored and regularly backed up.\u201d<\/em> <\/p><cite>\u2014 <strong>Ben Hartwig, Web Operations Executive at InfoTracer<\/strong><\/cite><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Of course, there are other things that he says are essential in terms of protecting and keeping your infrastructure operational (as well as maintaining uptime):<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Keep your equipment cool.<\/strong> Your data center runs on a variety of hardware \u2014 all of which generate a vast amount of heat. High temperatures that are left unchecked can literally cause machines to breakdown and melt or result in fires, so it\u2019s essential for every data center to use strong climate controls. Part of this includes having secondary cooling systems in place that can kick in should the primary system fail.<\/li><li><strong>Protect your power supply.<\/strong> Outages can happen for a variety of reasons \u2014 everything from human error to issues relating to the weather. They can also result from power losses or short power surges. Regardless of the cause, it means that you need to have backup power systems in place that can kick into gear when things go wrong to keep your equipment and servers functioning.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A last important point worth mentioning is to <strong>keep water lines separate from other key systems.<\/strong> Few things can ruin your day like a busted water main. So, be sure to have two lines coming into your facility in different locations, but keep them away from your power sources and other critical infrastructure.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-tip-6-use-data-center-network-segmentation\">Tip #6: Use Data Center Network Segmentation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Network segmentation is a process that, basically, helps you divide your data network into separate components based on endpoint identity. By dividing the network and isolating each segment independently, it creates additional barriers for hackers to have to get through and prevents hackers from freely roaming around your network.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mark Soto, whose cybersecurity and IT services company helps businesses whose data centers have been hacked, offers some key insights on what you can do to prevent being attacked and to limit the damage in the event that an attack is successful:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cBy using network segmentation, it can help prevent your entire system from getting compromised if hackers are able to access one of your networks. It also gives you time to react in the worst-case scenario where the other networks are also in danger of being hacked.<\/em><\/p><p><em>With network segmentation, you can also specify which network resources your users have access to. In a world where malicious internal users make up at least 30% of data breaches, this might be the biggest benefit of network segmentation.\u201d<\/em><\/p><cite><strong>\u2014 Mark Soto, owner of Cybericus<\/strong><\/cite><\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-final-thoughts-on-data-center-security\">Final Thoughts on Data Center Security<\/h2>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Businesses run on data, and your ability to keep that data safe can make or break your organization. <\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Your data center is the place where your network computers, servers and other essential components are stored. It\u2019s your data\u2019s safe haven in the midst of a disaster.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Keep your servers, network, and other related equipment as safe as humanly possible by implementing the following data center security best practices:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Put physical security measures in place that prevent bad guys from physically gaining access to your network and data storage equipment.<\/li><li>Implement and enforce access restrictions that ensure only those who need access (both physical and virtual) have it.<\/li><li>Use the right security tools to report on and protect against many digital security threats.<\/li><li>Keep everything up to date and patched to eliminate known vulnerabilities.<\/li><li>Have secondary systems and data backups in place that you can rely on when things go south.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If you\u2019re exploring the idea of using a cloud or managed hosting service provider, you have less control over the physical security measures that are in place than you would with an in-house data center. However, you can ask the service provider to provide you with compliance reports, which can help you feel more confident in their security capabilities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We\u2019re sure that you have additional suggestions for data center security, and we\u2019d love to hear \u2018em. Be sure to share your insights and suggestions in the comments below.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"block-45890299-2a20-4a17-903e-68f0845866ed\">Recent Related News<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"block-2494e001-2432-43ea-a156-1feec08acc7b\"><em>Updated on April 29, 2021<\/em><\/p>\n\n\n\n<ul class=\"wp-block-list\" id=\"block-4eb5d01f-8e97-4a9e-afc4-ce7341d916ad\"><li><a href=\"https:\/\/findbiometrics.com\/eyelock-provides-portable-iris-security-egyptian-data-centers-042206\/\" target=\"_blank\" rel=\"noreferrer noopener\">EyeLock Provides Portable Iris Security for Egyptian Data Centers<\/a><\/li><li><a href=\"https:\/\/www.nasdaq.com\/articles\/why-nvidias-data-center-move-should-give-amd-and-intel-sleepless-nights-2021-04-28\" target=\"_blank\" rel=\"noreferrer noopener\">Why NVIDIA&#8217;s Data Center Move Should Give AMD and Intel Sleepless Nights<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Protect your servers and data with these data center security best practices from 7 IT and cybersecurity experts Note: This article, which was originally published in 2020, has been updated&#8230;<\/p>\n","protected":false},"author":17,"featured_media":12449,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"categories":[16,13114],"tags":[12366,12365],"class_list":["post-12448","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hashing-out-cyber-security","category-updated","tag-data-center-security","tag-data-centers","post-with-tags"],"views":42055,"jetpack_featured_media_url":"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2020\/06\/data-center-security.jpg","_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/12448","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/comments?post=12448"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/12448\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media\/12449"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media?parent=12448"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/categories?post=12448"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/tags?post=12448"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}