Want to learn more?
Contact a data center team member today!
Top 5 things to ask your data center about compliance
Solution Guides
Premium Content
Learn the top 5 things to ask your data center about compliance.
Exclusive Preview
When choosing a colocation provider, the IT team typically looks for reliable infrastructure, robust physical security, ample bandwidth and other technical fundamentals. However, they may overlook a factor that is just as important: compliance.
When outsourcing your data center needs, understanding your colocation provider’s compliance program is of upmost importance. A colocation provider mitigates risk through physical and environmental controls from an operational and security standpoint. Ensuring proper maintenance and operation of critical infrastructure, along with upkeep and continual improvement of a physical security program, are part of a comprehensive compliance program.
Fill out the form to learn about the top 5 things to ask your data center provider about compliance, and to download this data sheet.
Featured services & solutions
Data Centers
Iron Mountain is a global data center company that provides tailored, sustainable, secure, carrier and cloud-neutral colocation solutions.
Data center security & compliance
Secure data centers from Iron Mountain provide the industry’s most comprehensive security and compliance program to meet your industry and business needs.
Data and IT security
Repurpose, reuse, recycle, and remarket IT assets to support landfill diversion goals
Here are five things to ask your data center provider about compliance
-
What certifications do you have?
What certifications and reports are present at the prospective site? Do these certifications and reports align with your compliance and business needs to ensure the proper physical and environmental controls are in place?
Your colocation provider should have a SOC 2 Type II report and ISO27001 implemented at a minimum. These two frameworks can provide customers and third parties assurance that a proper Information Security Management System is in place, and that technical audits occur regularly. Depending on your industry, you may also require frameworks outside of SOC and ISO. -
What security and operations posture is in place?
Beyond certifications and reports, it’s important to ask about physical security policies, personnel security policies, service delivery, availability and change practices.
Going over these ahead of contract execution will provide due diligence that the colocation provider is operating at all levels expected by your organization, outside of what certifications and reports can communicate.
To find out more download the data sheet about data center compliance.
Related resources
View More ResourcesView More Resources
Want to continue exploring?
Enter your information to access the full content.