DEPARTMENT OF THE ARMY
XXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXX

OFFICE SYMBOL                                                                                      Date

MEMORANDUM FOR SEE DISTRIBUTION

SUBJECT: Battalion/Brigade Policy Memorandum #23 – Data Center Security and Safety

1.	References.

a.	AR 25-2, Information Assurance, 23 March 2009.

b.	AR 380-5, Department of the Army Information Security Program, 29 September 2000.

c.	ICD 502, Integrated Defense of the IC Information Environment, 11 March 2011.

d.	ICD 503, Certifications and Accreditations of the IC, 15 September 2008.

e.	DODD 5230.09 Clearance of DOD Information for Release, 22 August 2008 - 2015.

f.	DODD 5200.01, Protection of Classified Information Volume 3, 19 March 2013.

2.	The purpose of this policy memorandum is to ensure the security and safety of the unit’s Data Center and the communications closet in the Tactical Support Building (TSB). It is imperative that access to these locations remains controlled and those approved for access maintain safe operating condition.

3.	Access to Data Center Server.

a.	Individuals requiring access to the data center and the TSB communications closet must be annotated on S6 access rosters approved by their organization director/deputy director.

b.	All access rosters must be routed through the S6 to the SSO for incorporation in the electronic badge system with appropriate server room access annotated. Copies of consolidated lists will be maintained and verified monthly by the S6 Telecommunications Manager, Configuration Manager, and SSO.

c.	All approved individuals must access server rooms via the electronic card swipe system. No "tailgating" is permitted when accessing the server rooms.

d.	All individuals requiring access to server rooms who have not been approved on an access roster must sign in and be escorted at all times by an individual with authorized access. It is the responsibility of the sponsoring element to provide the escort.

4.	Information Systems Security.

a.	All fixed information systems and removable media (i.e., removable hard drives, system CDs, system administrator laptops, etc.) within the server rooms must have appropriate classification stickers and markings. Hubs are not allowed.

b.	Removable media must be appropriately marked according to classification and stored appropriately after use.

c.	System administrators conducting administrative duties must log off systems when unattended.

d.	Doors to the server rooms will not be propped open for ease of access other than for movement of equipment in and out over a brief period of time. At no time will doors be propped open and left unattended.

5.	Server Room Safety.

a.	Server rooms will not be used to store excess IT equipment except for brief periods of time when making preparations for installation or turn-in/destruction. All new equipment staged for installation and excess equipment waiting for turn-in/destruction will be clearly labeled with appropriate classification and stored neatly away from major traffic areas.

b.	Packing materials associated with new equipment will be removed concurrent with installation of the new equipment. Flammable materials will not be stored in server rooms.

c.	Liquids will not be brought into the server rooms.

6.	Changes to the Production Environment.

a.	All hardware changes and cable plant modifications within the server rooms must be approved using the IT Configuration Management Plan. The S6 telecommunications team will conduct a final quality control check for all cable plant modifications at the completion of each installation to ensure DOD standards are met.

b.	All IT components brought into the building for use in the server rooms or removed from the building must be documented using the entry/exit process described in the Sensitive Compartmented Information Facility SOP.

7.	Security violations associated with this policy will be reported to the SSO for investigation.

8.	The point of contact for this memorandum is the S6 at (123) 456-7890.

FIRST M. LAST 
XXX, XX
Commanding

DISTRIBUTION: