Which demonstrates a strong potential for data center error(s)?

Unrestricted vendor access to infrastructure introduces significant, unmanaged risk. It bypasses essential operational controls such as change management, security auditing, and accountability. Allowing third parties to make changes without oversight or a formal approval process creates a high probability of misconfiguration, service disruption, or security vulnerabilities. While immediate issue resolution is important, it must be conducted within a controlled framework. The term "unrestricted" directly contradicts the principles of least privilege and secure operational management, thereby creating a strong potential for data center errors.

B. Precise documentation is a best practice that reduces the potential for error by providing clear, standardized procedures for technicians to follow during fault conditions.

C. Defined roles and responsibilities are a fundamental principle of secure and stable operations, ensuring that only qualified individuals perform specific tasks, which minimizes errors.

D. An approved change control process is a critical IT Service Management (ITSM) practice designed to prevent errors by ensuring all changes are reviewed, tested, and authorized.

---

1. NIST Special Publication 800-53, Revision 5, "Security and Privacy Controls for Information Systems and Organizations."

Reference: Control family AC (Access Control), specifically AC-2 (Account Management) and AC-3 (Access Enforcement).

Content: These controls mandate the enforcement of assigned authorizations and the principle of least privilege. Section AC-2(4) explicitly discusses disabling accounts for external users when access is no longer required. Unrestricted access is in direct violation of these foundational security principles designed to prevent unauthorized actions and errors. (Available at: https://doi.org/10.6028/NIST.SP.800-53r5)

2. Cisco, "Data Center Security: A ‘Defense-in-Depth’ Approach," White Paper.

Reference: Section "Controlling Access to the Infrastructure," page 5.

Content: The document states, "Access to the infrastructure devices...should be strictly controlled... Role-based access control (RBAC) should be used to define specific privileges for each administrator role." This highlights that restricting, not permitting unrestricted, access is a key strategy to prevent errors and security breaches.

3. ITIL Foundation: ITIL 4 Edition, Axelos.

Reference: Chapter 5.2.4, "Change Enablement" practice.

Content: The purpose of the change enablement practice (formerly change management) is to "maximize the number of successful IT changes by ensuring that risks have been properly assessed, authorizing changes to proceed, and managing the change schedule." This formal process (Option D) is the direct opposite of allowing unrestricted actions (Option A), which ITIL frameworks identify as a primary source of service incidents and errors.