Let's See Some ID: A Walk Through The Security Layers Of A Data Center

When Dorothy and her friends finally made it to the gates of the Emerald City, all they had to do to meet the wizard was present a pair of ruby slippers. They're lucky those gates weren't operating like a modern data center, however: That would have required significantly more steps for them to enter.

“Data centers are mission-critical operations, which means they are going to have a lot more layers of security than most buildings,” said Brandy Byrd Chapman, a data center security expert for Ameristar Perimeter Security. “Think of a military base: You're going to go through several layers of security before you even reach the base.”

How many layers of security does a typical data center have? While there is no set-in-stone number, Tier IV facilities, which have an expected performance uptime of 99.995% and therefore can’t afford to be disturbed by trespassers, typically have six layers, Chapman said.  

Lower-tier facilities might have slightly fewer, but Google set the bar high for most centers when it publicly announced its standardization of six security steps. As a result, any colocation data center that wants to do business with Google — or most other sophisticated players — follows the same model, Chapman said.

“Smaller data centers often preferred to have an open campus, to make them feel more inviting to a community,” Chapman said. “But there has been a shift in mindset in recent years when they realized that’s not realistic. They can’t afford to make security an afterthought.”

While Ameristar’s business is perimeter security, she said a fence, no matter how well-built and imposing, is only the first line in a multilayered defense strategy.

“It sets the boundary that says you have permission to enter or not enter this space and to delay anybody uninvited from coming in,” she said. “But multiple layers of security are there for a reason. The fence is to deter people, or to delay their entry, so your second layer of security can jump into action.”

Chapman walked us through the six levels and how they interact to protect a data center, “from the perimeter to the cabinet.” She also shared practical advice to help make a scheduled visit go smoother.

Property Boundaries And Secure Perimeter

Layers 1 and 2 include the signage, anticlimb fencing and crash barriers at the outer perimeter of the property. They warn people that they are on the edge of a no-go area where proof of identity and prior authorization must be presented — and not for the last time — before they can proceed farther.

“That’s what Ameristar provides, that very first layer of security that works in tandem with your lights, intrusion detection system and cameras,” Chapman said. 

One of the first things first-time data center visitors notice, even at this early stage, is the entry process is methodical and purposely unrushed, she said. Think of going through airport security, but with more steps and no plastic tubs provided to carry your personal items through an X-ray scanner.

“I always tell people, leave everything in your vehicle,” Chapman said. “Do not take your phone in, do not take a Fitbit or Apple Watch. Take all that stuff off because you are going to go through a metal detector, and not only as you're walking in — you’ll be going through those same layers of security as you're walking out, too.”

It’s probably also a good idea to wear comfortable shoes, be on time and remain patient with the process.

“I once took an Uber to a center, and because they're not allowed on-site, I got dropped off at the gate and had to walk from the gate to the building access point,” she said. “In fact, you’ll walk through every single layer of security. It always shocks people how long that actually takes.”

Once a visitor is cleared through the first two layers, it’s on to the third, where they actually enter the building.

Building Access

Once they are allowed past the locked entrance, visitors will continue to encounter checkpoints where they must provide identification in the form of a visitor’s badge. Depending on their level of clearance, they might not even get to the other, deeper layers of security. 

Once inside, each visitor must wait for the person ahead of them to go through a room’s door and for the door to close before they can take their turn.

“A first-timer might be tempted to walk in behind another person while the door is still open,” Chapman said. “That’s known as ‘tailgating,’ and it is not allowed. Everyone must be scanned and then enter separately.”

Security Operations And Data Center Floor

Most visitors will not get to Stages 4 and 5, which involve additional identity authentication checks. In fact, Google estimates that fewer than 1% of its employees will ever set foot on one of its data center floors.

Chapman said that while Ameristar’s specialty is perimeter fencing, parent company Assa Abloy provides technologies to support all layers of interior security. This includes door hardware, interior access controls and server cabinet locks.

“We provide solutions for each layer, from curb to core,” Chapman said.

Crusher Room

As its intimidating name suggests, this is where data storage devices are erased or destroyed if necessary. Very few people will get to see this sixth and final stage, but here is a brief video of one of Google’s data centers that gives a glimpse of a retired hard drive being shredded into metal and plastic mulch.

Chapman said this stage, like the preceding five layers, is necessary to keep a data center secure. Missteps at any one of them could compromise the center’s safety.

“Security needs to be layered, and this sequence of operations makes it most effective for our data center customers,” she said. “At a time when data centers are being built faster than ever, none of them can afford to overlook any one of the layers.”

If required to negotiate similarly multilayered security steps at the Emerald City gates, Dorothy and her ragtag friends might have just called it a day. 

This article was produced in collaboration between Ameristar Perimeter Security and Studio B. Bisnow news staff was not involved in the production of this content.

Studio B is Bisnow’s in-house content and design studio. To learn more about how Studio B can help your team, reach out to studio@bisnow.com.