Common use of Physical Layer – Facility Clause in Contracts

Physical Layer – Facility. Xxxxxxx’x datacenter has redundant power lines with redundant UPSs, generators, environmental systems, redundant, diverse network connections, online and offsite daily backups of data and a fully configured disaster recovery site with 48 hour RPO and 48 hour recovery time objective (RTO) timeframes. Datacenter access is restricted 24 hours a day by job function—with access given to essential personnel. Physical access control uses multiple authentication and security processes, including badges, on-premises security officers, and continuous video surveillance. The datacenters are monitored using motion sensors, video surveillance, and security breach alarms. In case of a natural disaster, security also includes automated fire prevention and extinguishing systems. Xxxxxxx’x obsolete storage media disposal process for hard drives and tape media leaving Xxxxxxx facilities is accomplished by physically drilling the media onsite. This goes beyond the "purge" requirement for these types of media defined by the NIST SP 800-88 document. For hard drives that are going to be repurposed, Xxxxxxx purges that media using over three passes of random overwrites, which conforms to the DoD 5220.22-M wipe standard.

Physical Layer – Facility. Xxxxxxx’x datacenter has redundant power lines with redundant UPSs, generators, environmental systems, redundant, diverse network connections, online and offsite daily backups of data and a fully configured disaster recovery site with 48 hour RPO and 48 hour recovery time objective (RTO) timeframes. Datacenter access is restricted 24 hours a day by job function—with access given to essential personnel. Physical access control uses multiple authentication and security processes, including badges, on-premises security officers, and continuous video surveillance. The datacenters are monitored using motion sensors, video surveillance, and security breach alarms. In case of a natural disaster, security also includes automated fire prevention and extinguishing systems. Xxxxxxx’x obsolete storage media disposal process for hard drives and tape media leaving Xxxxxxx facilities is accomplished by physically drilling the media onsite. This goes beyond the "purge" requirement for these types of media defined by the NIST SP 800-88 document. For hard drives that are going to be repurposed, Xxxxxxx purges that media using over three passes of random overwrites, which conforms to the DoD 5220.22-5220.22- M wipe standard.