Data centre security – Welcome to the next generation.
Data centres are at the heart of any business. We’ve spent many years working with server, network and storage systems that make working in a digitalised world possible. Businesses are striving to make better use of their IT resources and ready them for the future with the latest and best security technologies to reconcile them with their own cloud transformation.
Written by
E-Mail: hans-juergen.martini@bechtle.com
The challenge – To work securely.
Comprehensive and proactive protection against cyberattacks is crucial and of upmost importance for our customers no matter if the data centre is run on premise or in the cloud. Dynamic growth and increasing technological complexity are posing new questions for businesses and their IT organisations.
Is the in-house IT department up to the task of running the IT infrastructure and fulfilling necessary requirements to do so? Are businesses playing security catchup? Do established data centre architectures comply with the EU GDPR, BSI and institutions such as TISAX® or BaFin®?
Ready to face the digital world of tomorrow.
Organically grown IT infrastructures struggle to meet the demands of businesses for resource scalability and agility in the provision of new services while taking IT security into account. The aim should be to build a next generation data centre that’s ready for digitalisation and able to support the digital transformation. What does that mean? Completely reconfiguring data centres so that they are at the cutting edge.
Advanced data centre security framework.
Our advanced data centre security framework reference architecture shows you what you have to do to get your data centre up to scratch to fulfil the necessary security requirements. We take a best of breed approach which means finding and integrating the best possible solution for each application area.
Therefore, when planning a secure data centre, our IT architects consider the following points:
- On-premise or cloud architecture
- Segmentation on a network or server layer (micro segmentation)
- Access control to the data centre/cloud
- Secure cloud access (SaaS, IaaS, PaaS, etc.)
- Monitoring data communication within the data centre and beyond
- Monitoring for compliance and defence against cyberattacks and malware
- Correctly securing web, application and mail servers
- Global URL filter
- Virus and malware protection
- Data Leakage prevention
- Sandboxing
- End-to-end security
- Encryption
- Global and local load balancing
- Public key infrastructure
- Identity management and 2FA/MFA
- Privileged access management
- Up-to-date software product versions / patch management
- Centralised management and visibility
- Demand-oriented and legally-compliant logs
- Stability and operation of the data centre infrastructure