Data centres used in the processing of information take appropriate measures to guarantee continued uptime.
Specification
Appropriate measures for data centre uptime are:
(source: https://uptimeinstitute.com/tiers)
Security level:
- Medium: a Tier II or higher data centre.
- High: a Tier III or higher data centre.
External data centres have appropriate certifications to guarantee appropriate risk management practices, uptime and quality. Appropriate certifications include those of Uptime Institute (uptime), ISO9001 (quality), ISO27001 (information security).
ISO 27001 & 27002:2022
A8.6,
A8.14
SURF toetsingskader informatiebeveiliging (NBA-volwassenheidsmodel)
OP.03 Capaciteits en prestatiebeheer