STATE OF DELAWARE

DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:
Synopsis:

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 1 of 13

Data Center Policy

Establish a state-wide policy for the designation, classification,
construction and expansion of data center facilities.

Authority:

Title 29, Delaware Code, 9004C - General powers, duties and

functions of DTI 2) Implement statewide and interagency technology
solutions, policies, standards and guidelines as recommended by the
Technology Investment Council on an ongoing basis and the CIO,
including, but not limited to, statewide technology and information
architectures, statewide information technology plans, development
life cycle methodologies, transport facilities, communications
protocols, data and information sharing considerations, the technique
of obtaining grants involving the State's informational resources and
the overall coordination of information technology efforts undertaken
by and between the various State agencies;

Applicability:

This Policy is applicable to all users of the State of Delaware

communications and computing resources. DTI is an Executive
Branch Agency and has no authority over the customers in Legislative
and Judicial Branches, as well as School Districts, and other Federal
and Local Government entities that use these resources. However, all
users, including these entities, must agree to abide by all policies,
standards promulgated by DTI as a condition of access and continued
use of these resources.

Effective Date:
POC for Changes:
Approval By:
Approved On:

3/9/2007

Expiration Date:

None

Bill Hickox, Chief Operating Officer

Secretary Jim Sills, Chief Information Officer
3/9/2007

Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 2 of 13

Data Center Policy

TABLE OF CONTENTS
Section

Page

I.

Policy

II.

Definitions

11

III.

Development and Revision History

13

IV.

Approval Signature Block

13

I.

Policy

EXECUTIVE SUMMARY
This policy establishes the designation and classification of data center facilities
within the state, and the requirement for DTI approval of all construction and/or
expansion of data center facilities.
Contained within this policy are technical guidelines for Information Technology
professionals. It lays the groundwork for the proper use of data centers, server
rooms, computer rooms, computer closets, and all locations where multi-user
computing equipment (servers, communications equipment, etc.) is housed.
Additional standards and policies will build upon this foundation. Further insight into
this policy may be obtained through your organizations IRM (Information Resource
Manager) or the DTI CRS (Customer Relationship Specialist) assigned to your
organization.
PURPOSE
This policy includes a means of consistently describing data centers and defining the
appropriate relationship between types of systems.
This policy provides guidelines for State entities to classify the various reliability
levels of their data centers and be able to determine the relative safety of the States
data that is under their stewardship. This includes, but is not limited to Application
Service Providers, critical business partners and service providers.
This policy must be used in concert with other policies and standards in order to be
effective. The Data Classification Policy, Delaware Information Security Policy and
Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 3 of 13

Data Center Policy

the System Architecture Standard are especially applicable. The level of data center
reliability increases in importance when the data is non-public or the computer
system is critical to the States mission. The required level of reliability for a data
center is a result of classifying the data and determining the criticality of the
computer system.
This policy will be revised and reviewed every three years. However, the State is
obligated to comply with new laws or regulations coming into effect between
revisions.
POLICY STATEMENT
1. The establishment of a new data center by a state organization will require
the prior approval of the Chief Information Officer of the State of Delaware.
2. Significant expansion of an existing data center by a state organization will
require the prior approval of the Chief Information Officer of the State of
Delaware. For purposes of this policy, a significant expansion is an
undertaking that:
A) expands the floor space by 20% or more;
B) would change the data center classification; or
C) is expected to cost $50,000 or more.
3. Organizations with existing data centers should arrange to have the data
center evaluated and classified based on the characteristics defined in this
policy. Beginning January 1, 2008, any data center intended to be used by
an IT project must have a DTI-approved data center classification. To
facilitate this, DTI will provide data center classification services at no cost to
the requesting organization through December 31, 2007.

Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 4 of 13

Data Center Policy

IMPLEMENTATION RESPONSIBILITY
The responsibility of arranging for classification of an organizations data center
according to this policy lies with the organizations appointed IRM. DTI is responsible
to determine a data center classification based upon the criteria established herein,
whether through DTI personnel or through use of qualified vendors.
There are no plans at this time to require the upgrade or movement of existing
equipment or facilities based upon this policy. It is expected, however, that as
Business Cases are submitted for review by the internal Technology Investment
Council / Technology Investment Council, the issue of data center classification will
arise.
If there is ambiguity or confusion regarding any part of this policy, contact the point
of contact defined in the header of this policy.
DATA CENTER DESIGNATION LEVELS
Levels
Levels
Levels
Levels

1-2 establish the minimum standards for computer closets.

3-4 establish the minimum standards for server rooms.
5-6 establish the minimum standards for computer rooms.
7-10 establish the minimum standards for data centers.

Level 1 Basic Office Infrastructure

Environment
a. Shared power and cooling
b. Wet fire suppression
Management and Control
a. Ad-hoc or no Incident/Problem Management
b. Little or no change control process in place
Telecommunications
a. Individual carrier circuits with little or no redundancy
Security
a. Easily accessible by general staff

Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 5 of 13

Data Center Policy

Level 2 Basic Office Infrastructure with Improved Power

Environment
a. Shared building cooling
b. Dedicated unconditioned power
c. Non-redundant air conditioning
d. Wet sprinklers
Management and Control
a. Ad-hoc or no Incident/Problem Management
b. Little or no change control process in place
Telecommunications
a. Individual carrier circuits with little or no redundancy
Security
a. Somewhat accessible by general staff
Level 3 Basic Office Infrastructure with Improved Power & Cooling
Environment
a. Independent power and cooling
b. Non-redundant dedicated air conditioning
c. Wet sprinklers
Management and Control
a. Ad-hoc or no Incident/Problem Management
b. After the fact change control record-keeping
c. Little or no change control process in place
Telecommunications
a. Individual carrier circuits with little or no redundancy
Security
a. Behind locked door
Level 4 Conditioned
Environment
a. Dedicated power and cooling

Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 6 of 13

Data Center Policy

b. Conditioned power
c. Dedicated non-redundant air conditioning units
d. Limited fire rating (<1 hour, Wet fire suppression)

Management and Control

a. Change Control is an undocumented process; with
information notification and approval
b. Source Code Protection
Telecommunications
a. Individual carrier circuits with little or no redundancy
Security
a. Entry and exit monitoring through locked doors
Level 5 Isolated
Environment
a. Dedicated conditioned power and cooling systems
b. Single uninterruptible power supply
c. Non-redundant dedicated air conditioning units
d. Fire rating of 1 hour, limited / wet suppression
Management and Control
a. Change Control is an undocumented process; with
information notification and approval
b. Source Code Protection
Telecommunications
a. Individual carrier circuits with little or no redundancy
Security
a. Computerized entry and exit monitoring through locked
doors
Level 6 Improved Isolated
Environment
a. Dedicated conditioned power, UPS and cooling
b. Redundant, dedicated air conditioning units

Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 7 of 13

Data Center Policy

c. Fire rating of 1 hour, Smoke detection / pre-action sprinkler
system

Management and Control

a. Documented Change Control process; maintenance windows
are utilized; automated tool is being used; formal
notification and approval
b. Source Code Protection
Telecommunications
a. Individual carrier circuits with little or no redundancy
Security
a. Camera monitored and recorded and computerized entry
and exit monitoring through locked doors
Level 7 Reliable
Environment
a. Dedicated conditioned power, UPS, cooling systems
b. Redundant and dedicated air conditioning units
c. Fire rating 1 hour > 2 hour, intelligent detection System
d. Single back-up generator
Management and Control
a. Documented Change Control process; maintenance windows
are utilized; automated tool is being used; formal
notification and approval
b. Source Code Protection
c. Data center must be audited and re-qualified / certified at
least every three years.
Telecommunications
a. Redundant connections to single carrier
b. Switch and Routing spares available for critical applications
Security
a. Accessibility: Cameras monitored by guard and recorded
and computerized entry and exit monitoring through locked
doors, employee and vendor background checks

Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 8 of 13

Data Center Policy

Level 8 Reliable / Redundant

Environment
a. Dedicated and redundant conditioned power and cooling
b. Redundant air conditioning units, UPS, generators
c. Dedicated generators
d. Gaseous fire suppression, 2 hour fire rating, back-up fire
suppression
Management and Control
a. Documented Change Control process; maintenance windows
are utilized; automated tool is being used; formal
notification and approval; version control
b. Source Code Protection
c. Data center must be audited and re-qualified / certified at
least every three years.
Telecommunications
a. Connectivity to multiple carriers
b. Redundant core switches online and active
c. Incorporate latest EIA/TIA/IEEE Data Center standards
d. Incorporate R56 Bounding and Grounding Standards for
Data Centers
Security
a. Accessibility: Cameras monitored by guard and recorded
and computerized entry and exit monitoring through locked
doors, employee and vendor background checks
Level 9 Highly Reliable
Environment
a. Fully redundant: power train, cooling systems
b. Redundant air conditioning units, UPS, generators, fire
separation
c. Dedicated generators
d. Gaseous fire suppression, 2 hour fire rating, back-up fire
suppression
e. Fuel tank for generators must be located on site, with an
agreement for emergency replacement of fuel.

Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 9 of 13

Data Center Policy

f.

Building enclosed generators / weather protected mechanical

systems

Management and Control

a. Documented Change Control process; maintenance windows
are utilized; automated tool is being used; formal
notification and approval; version control
b. Source Code Protection
c. Data center must be audited and re-qualified / certified at
least every three years.
Telecommunications
a. Redundant connectivity to multiple carriers
b. Geographically diverse building penetrations
c. Redundant main distribution frame's
d. Independent building access points
e. Dual homed racks connected via diverse distribution
raceways
f. Multiple redundant core switches
g. Incorporate latest EIA/TIA/IEEE Data Center standards
h. Incorporate R56 Bounding and Grounding Standards for
Data Centers
Security
a. Accessibility: Cameras monitored by guard and recorded
and computerized entry and exit monitoring through locked
doors, employee and vendor background checks
Level 10 Geographically Hardened and Redundant
Environment
a. All Redundant: (power train, cooling system, UPS systems,
generators, fuel systems)
b. Early warning smoke detection, fire rating >2 hours, full
flooding gaseous suppression / back up.
c. Fuel tank for generators must be located on site, with an
agreement for emergency replacement of fuel.
d. Building enclosed generators / weather protected mechanical
systems
e. Site is compartmentalized for fire / damage control
f. Site is engineered to limit the damage or effect of weather

Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 10 of 13

Data Center Policy

and hazardous environmental exposure.

Management and Control

a. Documented Change Control process; maintenance windows
are utilized; automated tool is being used; formal
notification and approval; version control
b. Source Code Protection
c. Data center must be audited and re-qualified / certified at
least every three years.
Telecommunications
a. Redundant connectivity to multiple carriers
b. Geographically diverse building penetrations
c. Redundant main distribution frame's
d. Independent building access points
e. Dual homed racks connected via diverse distribution
raceways
f. Multiple redundant core switches
g. Incorporate latest EIA/TIA/IEEE Data Center standards
h. Incorporate R56 Bounding and Grounding Standards for
Data Centers
Security
a. Accessibility: Cameras monitored by guard and recorded
and computerized entry and exit monitoring through locked
doors, employee and vendor background checks
b. Location minimizes exposure to jurisdictional closure from
hazardous spill, acts of terrorism, sabotage or similar risks
ENFORCEMENT and WAIVER
DTI will enforce this policy during the course of normal business activities, including
review of proposed projects and during the design, development or support of
systems. This policy may also be enforced by others during the course of their
normal business activities, including audits.
If any dispute arises regarding the classification of data centers, it should be
presented to the Technology and Architecture Standards Committee (TASC) for
determination of proper classification.

Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

II.

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 11 of 13

Data Center Policy

Definitions

Business Case Summary (BCS) A document and associated process whereby

state organizations describe proposed IT projects and submit them for DTI
approval.
Business Servers Computers whose main purpose is to process business data.
This establishes a distinction between communications, laboratory, or trafficcontrol servers which are exempt from this policy.
Change Control http://en.wikipedia.org/wiki/Change_control
Change Management http://en.wikipedia.org/wiki/Change_management For the
purposes of this policy, control of technical change to an environment is referred
to as Change Control.
Computer closets Typically a wiring or utility closet that contains servers.
Computer rooms An area used for conducting IT activities over and above the
housing of servers. This may include high speed printers, output control, tape
management, and the like.
Data Center A building or series of rooms set aside expressly for IT services. For
purposes of this policy, the size of the building or room is immaterial. All such
rooms, whether referred to as computer rooms, server rooms, computer closets,
or other terminology, are considered data centers.
IDF - http://en.wikipedia.org/wiki/Intermediate_distribution_frame
Information Resource Manager (IRM) Those assigned the responsibility to act
as the primary points of contact for appropriate communications between DTI
and the organization.
iTIC (internal Technology Investment Council) A committee created by the
TIC with the responsibility of reviewing technology investments in the form of a
BCS to ensure that the resulting investment is compliant with state-wide policies,
standards and sound practices.

Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 12 of 13

Data Center Policy

ITIL ITIL (Information Technology Infrastructure Library)

An initiative developed by the Central Computing and Telecommunications
Agency consultancy for the government of the United Kingdom. It offers a set of
best practices in 24 service delivery and IT service support areas, including help
desk, problem management, change management, software distribution and cost
1
control.
MDF - http://en.wikipedia.org/wiki/Main_distribution_frame
Server - A computer or device on a network that manages resources. Examples are
file and print servers. The intent of the device is to provide benefit to more than
one person at a time. Servers usually perform many functions for multiple users.
A server would generally have a more robust Operating System than a PC (for
example Windows 2003 Server Edition). Servers tend to be rack mounted rather
than desktop mounted.
Server Rooms - A server room would be a collection of servers within one room.
System A combination of servers, communications equipment, and other
computing devices that together comprise an interrelated whole and deliver a set
of services to a defined set of customers.
TIC (Technology Investment Council) The body established by Delaware code
with the responsibility of overseeing the technology investments of the State.

Gartner, Inc. -- http://www.gartner.com/6_help/glossary/GlossaryMain.jsp

Enabling Excellence In Delaware State Government

STATE OF DELAWARE
DEPARTMENT OF TECHNOLOGY AND INFORMATION

801 Silver Lake Blvd.

Dover, Delaware 19904
Doc Ref Number:
Document Type:
Policy Title:

III.

SE-DCP-001

Revision Number:

Enterprise Policy

Page: 13 of 13

Data Center Policy

Development and Revision History

Initial version established 03/09/2007

IV.

Approval Signature Block

Name & Title:

Date

Cabinet Secretary State Chief Information Officer

Enabling Excellence In Delaware State Government