NCSC, CPNI offer security guidance to data centre operators

The National Cyber Security Centre (NCSC) and the Centre for the Protection of National Infrastructure (CPNI) have issued guidance on data centre security

Data centre operators will for the first time have access to tailor-made advice on how to keep the UK’s online assets secure.

 New guidance from the National Cyber Security Centre (NCSC) – a part of GCHQ – and the Centre for the Protection of National Infrastructure (CPNI) has been issued to help users and operators of data centres understand and mitigate potential security vulnerabilities.

Both organisations are encouraging data centre operators to adopt a single strategy uniting the physical, personnel and cyber security of data centres

Data centres an “attractive target” for threat actors both physically and in the cyberspace

Data is one of the UK’s most valuable assets, and it underpins almost all facets of modern life. However, this can make data centres an attractive target for threat actors, both physically and in cyberspace.

The new guidance sets out a holistic security strategy which encourages owners and users to consider how location and ownership of a data centre can affect who has access to sensitive information or affect strategic operating decisions; how cyber threat actors continuously evolve their methodology to breach defences; and how strong physical security can mitigate covert and forceful entry to data assets.

It also looks at how employees are critical to an effective security culture. 

NCSC Technical Director Dr Ian Levy said: “Operators and users of data centres have a clear responsibility to protect the data that they hold and process – failing to do this poses a massive financial, reputational and, in some cases, national security risk.

"Owning these responsibilities means understanding the array of methods that malicious actors could use to compromise a data centre both physically and digitally.

“I urge operators and users of data centres to consult this joint guidance and adopt the holistic security strategy it recommends.”

The Head of CPNI said: “Data centres and the data they hold are invaluable to the UK’s economy, security and prosperity. Threat actors constantly seek to evolve their methods to exploit any weaknesses in data infrastructure security, often concurrently.

"To minimise the risk of a breach it is critical that data centre security is viewed holistically with physical, people and cyber security risks considered with other factors such as where in the world infrastructure is located.

“By doing so, data centre owners and users can better safeguard their customer’s data, their business operations and keep the UK’s digital infrastructure running. In this period of stark geopolitical uncertainty, there is no better time than now for data centre operators and users to read the full guidance and make sure they’re best protected.”


Share

Featured Articles

How data management is key to successful ESG reporting

Levent Ergin, Chief ESG Sustainability Strategist, Informatica, explains how data collection & management are essential to transparent ESG reporting

Data Centre Magazine: Celebrations as we mark 3rd birthday

As we mark Data Centre Magazine’s birthday this week, we reflect on our highlights over the last three years and take a deep dive into the past 12 months

Equinix and the future of data centre digital transformation

As Equinix celebrates its 25th anniversary, Bruce Owen, Managing Director for Equinix, UK looks ahead to the future of the world of digital infrastructure

Eastdil bank appoints Rob Walters as data centre chief

Data Centres

Top 10 net zero pointers from data centre expert to execs

Data Centres

Aruba S.p.A on growth and sustainable data centre management

Data Centres