DS12 Facilities Management

1. Description

Installation of suitable environmental and physical controls which are regularly reviewed for their proper functioning to provide a suitable physical surrounding which protects the IT equipment and people against man-made and natural hazards.

2. Service Activities

Physical security: establish and maintain appropriate physical security and access control measures for information services function facilities in conformance with the general security policy,

3. Key Goal Indicators

A reduction in the number of facilities and physical security incidents, including theft, damage, disclosure, outage, health and safety problems
A reduction in the amount of downtime due to outage of utilities
A measured adherence to applicable laws and regulation
A measured adherence to insurance policy requirements
A measured improvement in the cost/risk ratio

ebc Service Commitments

a review of existing problems and opportunities in accommodation, developing action plans and implementing same, recognizing the constraint on the 250 Yonge St site. May include war rooms, training rooms, central or off-site storage of document/files, physical bulletin board space, etc,
Improve cluster CIO office capacity - a review of required functions and weaknesses in corporate office, plan for approval and implementation

4. Key Performance Indicators

Complete inventory and maps with identification of single points of failure
Frequency of training of personnel in safety, facilities and security measures
Frequency of testing of fire alarm and evacuation plans
Frequency of physical inspections
Reduced number of unauthorised accesses to restricted equipment rooms
Transparent, regular switching to no-break power
Time lag between recording and closure of physical incidents

ebc Service Commitments

5. Critical Success Factors

A strategy and standards are defined for all facilities, covering site selection, construction, guarding, personnel safety, mechanical and electrical systems, fire, lightning and flooding protection
The facilities strategy and standards are aligned with IT services availability targets and information security policies, and integrated with business continuity planning and crisis management
Facilities are regularly monitored using automated systems with clear tolerances and audit logs, CCTV (Close Circuit Television) and intrusion detection systems where necessary, as well as through physical inspections and audits
There is strict adherence to preventive maintenance schedules and strict discipline in the housekeeping of facilities
Physical access is rigourously monitored and based on need-tobe and zoning principles, with identification authorisation and exception procedures where needed
There are good relationships and exchanges of information with law enforcement, fire brigade and other local authorities
Clear, concise and up-to-date detection, inspection and escalation procedures exist, supported by a training programme

6. Additional Information

Maturity Level Characteristics


0	1	2	3	4	5