Sufficient capacity is defined as having enough battery capacity for at least 10 minutes. The UPS will also provide the facility to shutdown attached servers in the event of extended power failures. All servers will be physically secure at all times and in particular during non-working hours. Access to rooms where servers are held should be limited to authorised staff only. The maintenance agreement should provide basic hardware support to replace failed components.
All software is to be fully licensed and the conditions of licenses are to be enforced at all times.
All servers are to be housed in an environment that meets the temperature and humidity conditions specified by the manufacturer. The conditions outlined in this policy should be applied to all servers purchased after the date of ratification of this policy. All existing systems should be brought up to the standard with one year. Systems that are unable to be brought up to standard or are installed in a substandard manner should be evaluated. The evaluation should be provided to ITC and a risk assessment carried out to determine if the system is acceptable.