CDCS practice question 18 of 25

Do you need to consider blast protection when designing a data center?

Full set: 120 questions
Answer options
A: No, there is no reason for implementing blast protection as nobody can predict the impact of a bomb explosion.
B: Yes, if the data center is a potential target or the building is located within the vicinity of (close by) a potential target. Correct answer
C: No, blast protection is not a requirement of ANSI/TIA-942.
D: Yes, blast protection is a requirement of ANSI/TIA-942.
Correct Answer:
B. Yes, if the data center is a potential target or the building is located within the vicinity of (close by) a potential target.
Explanation

The decision to implement blast protection is a direct outcome of a thorough risk assessment, a fundamental step in data center design. This assessment must evaluate the specific threats to the facility. If the data center is identified as a potential target itself (e.g., a government or major financial institution) or is located in close proximity to other high-profile targets (e.g., embassies, major transport hubs, or critical infrastructure), the risk of being affected by an explosion is significant. In such scenarios, considering and likely implementing blast protection measures is a critical aspect of ensuring the physical security, resilience, and operational continuity of the data center.

Why Incorrect

A. The potential for an event, even if unpredictable, is precisely why risk assessments and mitigation strategies like blast protection are considered and implemented.
C. While ANSI/TIA-942 does not universally mandate blast protection, it requires a risk assessment that would necessitate considering it if the location or nature of the facility warrants it.
D. ANSI/TIA-942 does not make blast protection a mandatory requirement for all data centers; its implementation is based on a site-specific risk analysis.

References

1. ANSI/TIA-942-B, Telecommunications Infrastructure Standard for Data Centers.

Section 5.2, "Site Selection": This section details the requirement to evaluate risks associated with a potential site. It specifically mentions assessing proximity to man-made hazards, which includes potential targets for malicious acts.

Annex G, "Data center site selection and design considerations": This informative annex provides guidance on evaluating risks from man-made disasters, stating that "The data center should not be located in a high-risk area that is a likely target for man-made disasters." This directly supports the principle of considering threats based on location.

2. Uptime Institute, "Tier Standard: Topology"

Section: Site Selection: The standard mandates that "The site selection process shall include a risk assessment of the proposed location... Man-made disasters, both accidental and intentional, shall be evaluated." This reinforces that the decision is risk-based and contingent on the threat profile of the location, as described in option B.

3. Federal Emergency Management Agency (FEMA), "FEMA 426: Reference Manual to Mitigate Potential Terrorist Attacks Against Buildings"

Chapter 3, "Explosive Blast": This document provides detailed guidance on assessing blast threats and designing protective measures. It emphasizes that the level of protection is determined by a threat and vulnerability assessment, which considers whether a building is a likely target due to its function, symbolism, or proximity to other targets. This is an official source outlining the standard methodology for critical infrastructure protection.

Scroll to Top