Winter brings unique challenges, particularly for critical infrastructures like data centers. These facilities rely on precise environmental conditions to operate effectively. Cold weather can disrupt sensitive cooling systems, damage essential equipment, and complicate on-site maintenance due to snow or ice, making proactive preparation crucial. Preventive maintenance, strict procedures, and round-the-clock monitoring are essential to ensure flawless and reliable operation in harsh winter conditions.

The biggest challenge for a data center in winter are subzero temperatures. Freezing water in cooling circuits is one of the most significant risks because it can block the flow of coolant and cause pipes to burst. This damage to essential components can potentially lead to prolonged downtime across the entire facility.

Outdoor generators, which are often exposed to the elements, require additional attention. For example, extreme cold can cause fuel to thicken, making it difficult for the generator to start, while snow or ice buildup can block ventilation or damage components. These issues highlight the necessity of addressing specific challenges that arise during winter.

Prevention is key

Strict procedures and preventive maintenance, supported by technologies such as automated monitoring systems, predictive maintenance tools, and insulated pipe solutions, can effectively mitigate winter risks. Critical installations should be thoroughly inspected before the winter season. Cooling systems require protection to prevent freezing, stagnant water in pipes must be removed, and batteries for cooling cells should function efficiently to ensure smooth operation. Filters should also be inspected, and all standard periodic tests completed to maintain system integrity.

Verifying fuel levels, checking for leaks, and updating emergency procedures are essential tasks that should be completed well before the onset of frost. Ensuring the site itself is prepared is also important; this includes inspecting roofs, water pipes, drains, and ensuring supplies of road salt are adequately stocked for icy conditions. A standard procedure checklist can help ensure that every aspect of the site is winter-ready.

Training and preparation make the difference

Operational team training is vital to the success of these preventive measures. Regular training sessions and updates ensure that teams are familiar with standard procedures and prepared for potential emergencies. Scenario-based training exercises can improve readiness for unexpected incidents. While this involves considerable effort, it is critical to keeping data center operations running smoothly during even the harshest winters.

Round-the-clock monitoring

Continuous monitoring plays a crucial role in stability during winter as well. Round-the-clock-monitoring systems can track hundreds of parameters, alerting the team to anomalies immediately. During the winter months, special attention should be given to temperature fluctuations within the facility. Monitoring the temperature in all rooms allows for prompt intervention if deviations occur, always ensuring stable and reliable operations.

A continuous process of improvement

Preparing a data center for winter is not a one-time action but a continuous cycle of evaluation, adaptation, and readiness to ensure long-term resilience. A combination of preventive measures, strict monitoring, and well-trained teams ensures data centers remain resilient, regardless of weather conditions. By maintaining this level of preparation, data centers can consistently uphold operational reliability, even during the most severe winter conditions. Regular post-winter evaluations can identify areas for improvement, ensuring even better preparation for the future.

The Network and Information Security Directive (NIS2) is a significant legislative update by the European Union aimed at boosting cyber security and protecting critical infrastructure. In a recent article, we introduced NIS2 and discussed its structure and some of its measures. Now, we delve a little deeper into what NIS2 will mean for data centers, with the help of Arnaud Martin, Expert Cyber security Regulation & Standardisation at Agoria. Agoria is a Belgian employers organisation that has more than 2000 technology companies from the manufacturing industry and the digital and telecom sectors among its members.

What are the main changes introduced by the NIS2 legislation compared to the original NIS Directive?

Arnaud Martin: “The NIS2 Directive broadens the scope of its predecessor. It aims to achieve a high level of cyber security across the EU by standardising measures and responsibilities. If we keep that goal in mind, six main changes stand out:

1. The scope extension includes a whole array of sectors that weren’t included in the NIS directive. Size criteria were also added.
2. Self-registration is an obligation. Originally, the authorities had to designate you as being in NIS. A process that not every country followed equally well. Now companies of a certain size are automatically included, shifting the responsibility of registration to the companies themselves. Delays are eliminated and more comprehensive coverage is ensured.
3. Standardised cyber security measures are now mandatory across member states, reducing fragmentation. If every country has their own guidelines, that doesn’t work. Countries can still add to the standard measures, but at least there is a clear base for everyone.
4. Top management responsibilities are emphasised, holding them accountable for breaches. Cyber security is now a responsibility at the highest level, not just of the IT department.
5. Extended reporting obligations require early notifications and regular updates on incidents. You must alert the authorities and any affected parties.
6. National cyber security response teams have gained more authority to support and coordinate efforts.”

Which sectors are now covered by the NIS2 Directive that were not included in the original NIS Directive?

Arnaud Martin: “NIS2 includes a broad array of new sectors but also subsectors that weren’t included yet. For example, digital infrastructure was already in the original NIS, but now it also covers data centers. Content delivery networks, electronic communications, trust service providers, and ICT service management were also added to that category. The public administration sector is now included, which is crucial as breaches affect large groups of people. Hospitals are now specified, alongside the general healthcare sector. On top of that, Annex II lists other -slightly less- critical sectors that are still considered important like postal and courier services, waste management, chemicals, food manufacturing, and research.”

Why was this NIS directive update necessary?

Arnaud Martin: “The update was necessary to address evolving requirements and existing problems with the original NIS directive. The six main changes discussed above, are the areas that needed improvement and clarity. There were inconsistencies in scope and varying cyber security measures across countries. The new self-registration mechanism ensures comprehensive coverage, and the extended scope addresses sectors previously overlooked. These changes aim to create a more consistent and robust cyber security framework across the EU.”

Do companies still underestimate the importance of cyber security?

Arnaud Martin: “It really depends on the sector. In industries like banking, energy, and telecom, cyber security is ingrained in their operations. However, many companies, even in the digital sector, still do not fully grasp its importance. NIS2 helps level the playing field, as the same regulations apply all over Europe. It will set a new standard, much like what happened to quality management by introducing certifications like ISO9001, which are now well known and commonly used and required.”

Impact on Data Centers

How will the new NIS2 requirements affect the operational procedures of data centers?

Arnaud Martin: “Data centers usually have security, including cybersecurity, very high in their priorities. However, NIS2 might still impact various operational aspects of data centers as it mandates cyber security integration into all critical business processes. This includes identifying those critical business processes and data, and ensuring these are adequately protected, guaranteeing continuity. More specifically: defining and updating policies, maintaining stringent access controls and up-to-date asset handling, and regularly reviewing procedures. It’s a comprehensive organisational challenge that requires continuous updates and clear definitions of roles and responsibilities. Some data centers will already have this covered: a company that is ISO27001 certified is expected to already be compliant with NIS2, since it even goes a little beyond NIS2’s requirements. But even these data centers shouldn’t leave anything to chance. The EU is currently working on an Implementing Act, which will detail specific measures, and data centers need to review and adapt their procedures accordingly. A draft of this implementing act is currently being finalised, detailing the different measures across 27 pages.”

What specific measures must data centers take to comply with the NIS2 regulations?

Arnaud Martin: “Leadership responsibilities are clearly defined. Senior management must approve cyber security measures and undergo training to understand and manage risks. Data centers must also provide regular cyber security training to all staff, ensuring awareness and competence. Worst-case scenarios must be covered, with a disaster recovery plan, proper back-up and crisis management”

How can data centers adapt their risk management processes to meet the NIS2 guidelines?

Arnaud Martin: “Data centers should refine their risk management processes by conducting thorough analyses and evaluating existing procedures. The Implementing Act provides a detailed approach of 10 steps, and compliance with certifications like ISO 27001 can aid in meeting these requirements. Regular updates and audits are essential to ensure ongoing compliance and effectiveness.”

What are the implications of the new supply chain security requirements for data centers?

Arnaud Martin: “NIS2 places significant emphasis on supply chain security, which might become the most impactful change. The draft Implementing Act includes four selection criteria and nine elements to specify in contracts. Data centers must evaluate and monitor their suppliers regularly, ensuring they meet strict cyber security standards. Contracts should specify security measures, including background checks and audit reports. This thorough approach can have a waterfall effect to third and even fourth-party suppliers, necessitating a comprehensive and continuous evaluation process.”

What are the new incident reporting requirements under NIS2 and how can data centers prepare for them?

Arnaud Martin: “NIS2 mandates early notifications to the relevant authorities within 24 hours of detecting an incident, followed by an initial assessment within 72 hours and a detailed report after a month. In view of their criticality, data centers should invest in advanced incident detection and response tools and consider establishing a Security Operations Center (SOC) to handle incidents effectively, if it isn’t in place yet. Preparedness involves having structured procedures and trained personnel ready to respond 24/7 to incidents promptly.”

Are there specific technologies or actions you recommend for data centers to be prepared for the NIS2 requirements?

Arnaud Martin: Data centers should invest in robust incident detection and response tools, such as Extended Detection and Response (XDR) and Network Detection and Response (NDR). When it comes to managing their SOC, Data centers might also consider partially outsourcing incident response for an extra set of eyes. Not fully though, as building your own expertise can be beneficial as well. Regular evaluations and updates of cyber security measures are crucial to stay compliant with NIS2 requirements.

Conclusion

NIS2 represents a significant step towards strengthening cyber security across the European Union. For data centers, this directive brings both challenges and opportunities. By adhering to NIS2 requirements and fostering a proactive security culture, data centers can enhance their resilience against cyber threats and contribute to a more secure digital ecosystem.

Please note that this article is not a substitute for in-depth training on this topic. For further guidance, data centers can consult cyber security experts or refer to the official documentation provided by the European Commission.

The amount of data generated and stored is growing exponentially. Digital transformation, societal interconnectedness, AI, and our vast online activities contribute to this data flood. Data centers play a critical role in enabling this growth. As the volume of sensitive data increases, data centers must ensure continuous service availability and robust protection measures.

Recognising the importance of data management and governance, the European Union has introduced the EU Network and Information Security Directive (NIS2), an update of the existing NIS directive. NIS2 aims to achieve a high common level of cyber security across the EU. This article focuses on the general scope of NIS2 and its implications for data centers.

Understanding (the structure of) NIS 2

NIS2 broadens its scope to include more sectors beyond traditional critical infrastructure. This now explicitly covers data centers, but also healthcare, financial services, and the public administration sector, reflecting the growing interdependence of digital services.

NIS2 requires companies to comply with several security measures, often demonstrated by certifications like Cyber Essentials or ISO 27001, which have the advantage of being presumed compliant with NIS 2. They focus on 3 main articles of NIS2:

• Article 20: Governance
• Article 21: Cyber security risk-management measures
• Article 22: Reporting obligations

Governance is a significant aspect of NIS2, emphasising the responsibility of all company members. Management bodies are now more accountable for security breaches, and training is crucial for understanding cyber security’s gravity. Every employee must recognise that a cyber security issue at their level can impact the entire organisation. But what are risk-management measures to take to be NIS 2 compliant?

10 cyber security risk-management measures

The general assumption is that security breaches can happen to anyone at any time. The purpose of the cyber security risk-management measures is to protect network and information systems, and the physical environment of these systems from incidents. This can mean an array of things, but to make this more digestible, NIS2 hands 10 thematic areas to us, which form the minimum measures.

1. Risk assessments and security policies for information systems: companies must have clear cyber security policies, covering everything from asset inventories to disaster recovery procedures.
2. Incident handling: this is defined as actions to prevent, detect, analyse, contain, and recover from incidents. Policies should include detection procedures, reporting phases (initial report, incident report, detailed report), and communication protocols. For example, incident reporting can include information like the affected assets, the date and time of the detection, the detection method, the immediate actions, and internal and external communications related to the incident.
3. Business continuity plans: these ensure critical business functions continue during and after disruptions, with policies for updating backups and assigning recovery roles. A strong business continuity plan can limit the effect of a breach on your own business, but also your clients’.
4. Supply chain security: supply chain attacks are described as one of the factors that contributes to the increase in ransomware attacks. NIS2 emphasises the importance of security in supply chains, particularly for SMEs, which are often targets for attacks affecting their operations and their clients. They often have fewer security resources and less rigid measures on risk and crisis management. Companies must install security measures that fit the vulnerabilities of each direct supplier and assess the overall security level for all suppliers.

5. Effectiveness Evaluation: policies and procedures for evaluating the effectiveness of cyber security risk-management measures go hand in hand with continuous improvement and compliance monitoring. This is achieved through regular internal audits and evaluations by competent authorities who ensure effective cyber security risk management.
6. Procurement and Vulnerability Handling: security around the procurement of systems and the development and operation of systems is essential. More specifically, we can discuss vulnerability handling and a vulnerability disclosure, which lays the emphasis on the reporting obligation. Coordination between entities is, again, of utmost importance when vulnerabilities are discovered.
7. Cyber hygiene and cyber security training: it’s mandatory to train and management bodies on a regular basis, covering software updates, device configuration, and phishing. Data centers should also inform their clients of significant cyber threats and of possible measures that they can take to safeguard their devices and communications.
8. Policies and procedures regarding the use of cryptography and encryption is the next thematic area. Cryptography should be used in a manner that aligns with the information classification and risk analysis results, then it can provide the necessary environment for protecting data confidentiality, authenticity and integrity. The use of encryption technologies is also mandatory.
9. Human Resources Security and Access Control: Procedures for employees with access to sensitive data, including background checks and access control methods like ID cards and biometric data.
10. Authentication and Communication Security: Multi-factor authentication, secured communication systems, and continuous authentication solutions are crucial for managing user identities and protecting authentication information.

NIS2 represents a critical step forward in bolstering Europe’s cyber security landscape. For the data center sector, this directive brings both challenges and opportunities. By adhering to the requirements and fostering a proactive security culture, data centers can enhance their resilience against cyber threats and contribute to the overall security of the digital ecosystem.

Data centers must take proactive steps to align with NIS2, ensuring they are well-prepared to handle the evolving cyber security landscape. For further guidance, data centers can consult with cyber security experts or refer to the official documentation provided by the European Commission.

Redundancy is crucial to modern data centers, essential for ensuring high availability and reliability of services. Redundancy means that multiple installations are provided for the same critical components, such as power supply, climate control, connectivity, monitoring, security, and backups. Power outages and other service interruptions are expensive, so data centers must avoid unplanned downtime at all costs. Redundancy is one of the key factors in achieving that.

The (double) strength of redundancy

Redundancy offers indispensable assurance to data centers and their customers. Firstly, it increases reliability: systems continue to function despite possible failures or interruptions. Additionally, it improves availability: data center services stay active, even during maintenance or component failures. This helps mitigate risks and is crucial for business-critical applications and the uptime of our data centers.

According to Uptime Institute’s 2022 Global Data Center Survey, published in 2023, more operators are investing in their resiliency. About 40% of respondents reported that they were increasing the redundancy levels at their primary data centers. Power and cooling systems have received similar attention, with a third of operators upgrading either or both.

While providing redundant systems equals spending more on the hardware needed, the high cost of data center downtime can often justify these investments to a certain extent. Redundancy minimises the risk of these high costs by ensuring operations and uptime for customers.

Redundancy options

In a modern data center, there are many possibilities for which components can be installed in a redundant way. In this section, we will list the most common options.

Power

An example of power-related redundancy would be independent power circuits. In this case, A and B supplies will be provided, fully separated. This ensures devices remain functional even if one supply fails. Further support for these power circuits could come from redundant UPS (Uninterruptible Power Supply) systems and emergency generators in case of a power outage.

When regular power supply fails, the UPS immediately detects this disruption and switches to battery power to maintain a consistent power supply. Emergency generators do not start operating immediately; they require some time to start up, which can be up to a few minutes. When they are operational, they will take over from the UPS. So even though there are backup systems provided in case of a power outage, these separate systems might also have a redundant equivalent.

Cooling and security

The cooling systems in data centers often have more capacity than necessary, with independent units, preventing a failure in one unit from impacting customer operations. If one of the units fails, there cannot be any risk of overheating, as that can cause the servers to malfunction. That’s why it’s safer to also provide redundant cooling units. The same applies to other security systems (including fire suppression systems, physical and digital security) and system monitoring. It’s a data centers’ core to ensure everything runs safely and optimally for our customers, making redundancy essential.

Connectivity

Additionally, connectivity options are best designed with redundant entry points throughout the building. This is to avoid single points of failure, or intersections where both redundant lines cross, meaning that if one line is disrupted, there does not have to be loss of connection. Some data centers even offer two redundant meet-me rooms, which are fully independent of each other.

An even more specific aspect of redundancy are patches or cross-connects, physical connections between a telecom operator and the customer. From the meet-me room, cross-connects connect to various racks, cages, or suites in the data center where end customers have their equipment. Data centers can opt for redundant structured cabling or connectivity cabling to both meet-me rooms. This backup ensures that if a connection in one part of the data center fails, an alternative connection is available, ensuring service continuity. This is especially important for companies whose end customers have 24/7 access to their services.

Levels of redundancy

Now that we know which components can be redundant, we can look at the different possible levels of redundancy. Redundancy in data centers is categorised into different levels to indicate how robust a system is against failures. Terms such as N+1, N+2, 2N, and 2N+1 are commonly used to describe these levels. But what do these terms mean?

N+1 Redundancy:

N stands for the number of components required to ensure basic functionality. +1 means there is one additional component beyond the necessary number.

For example, if a data center needs 3 cooling units to maintain optimal temperature, an N+1 setup would mean there are 4 cooling units; one extra as a backup in case one of the units fails.

N+2 Redundancy:

This involves two extra components beyond the basic requirement. It offers a higher level of safety as more backups are available. For instance, if two of the required components fail simultaneously, the system will still function.

2N Redundancy:

This is a completely duplicated setup of all required components. So, if a data center needs 5 cooling units, a 2N configuration would have a total of 10 units.

This level of redundancy ensures very high availability because the entire system can continue to operate, even if half of the components fail.

2N+1 Redundancy:

This is similar to 2N redundancy but includes an additional component.

In the example with the cooling units, this means there is not only a duplicate set of 5 units (equalling the 10 mentioned above) but also an extra server as further backup, so 11 in total.

These levels of redundancy ensure that a data center can operate reliably, even under unforeseen circumstances such as technical failures. The higher the level of redundancy, the lower the chance of downtime, but this also comes with higher costs. Choosing the right level of redundancy can also depend on how critical the services provided by the data center are.

Conclusion

Redundancy is not a luxury but a necessity in modern data centers, with benefits for reliability and availability crucial for business-critical operations. Some go even further then redundancy of critical installations in one data center, opting for geo-redundancy. This means that data center components are duplicated in different areas or even countries, to make sure that a climate event in one country or continent won’t halt their operations. Better to be safe than sorry.

But as mentioned above, even redundancy of critical components like power, cooling, and connectivity can be a big aid in preventing service interruptions. Increased investment in redundancy, as reported by the Uptime Institute, reflects its value in mitigating the costly impacts of downtime. Considering the different levels of redundancy, from N+1 to 2N+1, there is a formula that works for every data center and their need for continuous operations.

The media landscape has transformed drastically over the past decade, evolving in technology, platforms, and storytelling. But how have these changes shaped audience expectations and habits? How can media companies stay ahead and attract the talent necessary for innovation? An enlightening talk show on Kanaal Z recently delved into these issues. Read/download the pdf report below for the key takeaways.

LCL and CIONET selected the uniquely transformed Hotel Martin’s Patershof in Mechelen, which marries its historic character as a former church with modern design elements, as a fitting setting for a roundtable titled “The Old and the New”.

This gathering, held on 14th March 2024, facilitated an interactive dinner discussion among ten digital thought leaders on the pressing matter of effectively integrating traditional back-end systems with state-of-the-art front-end technologies.

This gathering was part of the partnership programme between LCL, the Belgian specialist provider of data centre facilities, and CIONET, the leading community of digital executives in Europe.

The evening featured expert insights from Koen Vandaele, CIO at Delen Private Bank, and Rocky Woestenborghs, Head of IT for domestic products at ING, focusing on the complexities and strategies of tech integration within the banking sector. Both leaders shared their journeys, including challenges and successes. Their experiences offered valuable insights into the process of technological evolution in
the banking industry and led to a lively interaction with the other digital executives from various private and public sector organisations.

This report summarises the main findings of this compelling debate.

Data centers are filled with servers and technology that must be reliable 24/7, 365 days a year. To ensure that that’s possible, data centers don’t just require electricity and connectivity, they also need capable staff. There are many important jobs to be done in a data center, including that of a Critical Infrastructure Manager. This position may sometimes be referred to as ‘facilities manager’, but you will find out below why the ‘critical infrastructure’ part is in fact critical to the job title.

The critical infrastructure of a data center

The main responsibility of a Critical Infrastructure Manager, supported by a team, is to ensure a good uptime for the data center. But what infrastructure is critical to maintaining that uptime? It can be split into 3 categories:

1. POWER

Data centers require a continuous power supply to ensure uninterrupted service. Any power outage can lead to service downtime, affecting countless businesses and users dependent on the data center’s resources.

It is the critical infrastructure team’s responsibility to make sure there is a constant power supply, or in the event of an outage, that the backup power supply takes over so there are no interruptions for the customer. That backup supply usually consists of UPS’ (uninterruptible power supply) that will take over immediately until the backup generators are up and running and will take over in turn.

2. COOLING

Data center equipment generates significant amounts of heat, especially the servers themselves. Without effective cooling, this heat buildup can lead to hardware malfunction, reduced performance, and decreased lifespan of equipment.

Cooling systems must be managed to maintain optimal temperature and humidity levels, which is another responsibility of the critical infrastructure team.

3. FIRE DETECTION

The high concentration of electrical equipment in data centers poses a significant fire risk. Early fire detection systems are critical for identifying potential fires before they can spread, minimizing damage and downtime.

In the event of a fire, a rapid and effective suppression system is necessary to protect both the physical equipment and the invaluable data stored within the data center. These systems must be designed to extinguish fires without damaging the sensitive electronics. The critical infrastructure team oversees the proper functioning of those systems.

For these 3 categories, the critical infrastructure team manages preventive and reactive maintenance of all installations. Preventive maintenance is a proactive strategy to regularly service and maintain equipment to prevent failures, ensuring reliability and efficiency. Reactive maintenance addresses equipment failures as they occur. The critical infrastructure team will often do the first intervention themselves, but further troubleshooting and maintenance might also be executed by partners. Another important part of the job is monthly testing to check whether all the backup systems are functional, so they can be reliable in case of incidents. Lastly the critical infrastructure team will also monitor the installations, which can lead to a faster discovery of technical issues and more efficient and sustainable use.

Critical Infrastructure Manager

What makes a Critical Infrastructure Manager in a data center so unique compared to similar roles in other companies? The exact critical nature of their work. A power failure in a data center doesn’t just plunge the room into darkness; it can disrupt entire businesses, triggering ripple effects far beyond the data center’s confines. Unlike in an office environment, where air conditioning might be a luxury, in a data center, cooling is a necessity to protect expensive equipment from overheating and potential damage.

Data centers are distinctive in their universal adoption of redundant systems, ensuring that for every critical component, there’s an identical backup ready to take over in case of failure. This redundancy not only offers peace of mind in operational stability but also significantly reduces the risk to clients since any issue can be seamlessly managed by the backup. This setup allows for more thorough analysis and response to issues, a luxury not afforded without such backups. However, this redundancy requires increased maintenance and testing to ensure each component’s reliability and avert more significant issues.

A Critical Infrastructure Manager in a data center understands that thorough preparation is key to success. They develop comprehensive procedures for both maintenance and reactive interventions, with each step carefully planned to minimise the chance of incidents. The better the preparation, the lower the risk of incidents. But if an incident occurs, it is also part of the job to respond immediately and ensure that uptime is restored as quickly as possible.

The job entails ongoing risk assessments, focusing not just on safety but also on how maintenance might affect customer service. The importance of risk analysis cannot be overstated—it’s all too easy to overlook critical details without a comprehensive checklist. Special permits are drafted for various tasks, from roof work, to working beneath the floor, to handling hazardous materials, ensuring every precaution is detailed. This meticulous approach ensures safety and efficiency, adhering to a principle that experience should never lead to complacency.

For new data centers, sites, or installations, fresh procedures must be devised from the ground up. While templates can guide the process, no detail should be overlooked. Subsequent annual maintenance may follow a set pattern, but initial setup demands thorough groundwork. Each intervention requires a fresh approach, with constant consideration for evolving technologies and methods, emphasizing the need for adaptability.

The role of a Critical Infrastructure Manager spans both strategic planning at the desk and hands-on engagement in the field. While much of the planning and oversight can be done digitally, ensuring compliance and readiness, firsthand knowledge of the installations is crucial. In the event of an incident, immediate and informed action is necessary, highlighting the dual nature of this role which blends managerial duties with technical expertise.

Everyone in a service environment knows that planning is important, but the unforeseen must always be accounted for. This is where procedures and risk analyses really come into play. Additionally, the strategic scheduling of preventive maintenance plays a key role in mitigating potential issues before they arise.

In a time when reliance on digital services is ever-growing, the significance of the Critical Infrastructure Manager for data centers and their specialised knowledge cannot be overstated. The Critical Infrastructure Manager must possess a deep understanding of data center operations, strong problem-solving skills, and the ability to anticipate and mitigate risks that could impact the data center’s operations.

Sustainability is high on the agenda for most businesses. And if it’s not, it soon will be, thanks to impending EU legislation. The European Corporate Sustainability Reporting Directive (CSRD) will require the larger companies to report on sustainability from 2025. Up until now, companies have interpreted the term “sustainability” in many different ways. And although ESG reporting (environmental, social, and governance) does indeed consist of three components, most attention is usually paid to the environmental aspect. Governance and corporate social responsibility deserve more attention. By all means, ESG is becoming a clear competitive differentiator.

The debate

A recent debate, expertly organised and moderated by CIONET in collaboration with LCL, brought together a select group of CIOs to delve into the complexities of sustainability in the digital age.

It is striking to see how quickly ESG is gaining momentum. When CIONET organised a similar debate about a year and a half ago, it was clear that the topic was still fairly new territory for many companies. The participants understood that their sustainability programme could only be successful if they aligned it with their business strategy. They specifically pointed out the role of IT as an enabler of their sustainability programme, but at the same time also admitted that it wasn’t always easy to get a concrete view of the real (business) gains sustainability can bring. It’s true to say that — especially in the field of emissions — IT remains not only an enabler for achieving results but IT also remains an important contributor to emissions. This makes calculating the total impact score of IT a difficult exercise. Especially as there is no consensus on standards for ESG reporting.

Data centers are filled with servers and technology that must be reliable 24/7, 365 days a year. To ensure that that’s possible, they don’t just require electricity and connectivity, data centers also need capable staff. Field technicians are one category of data center professionals.

Everyone has had technicians come to their house to fix the electricity or the heating, but of course a data center technician must have a specific skill set. They have a crucial role in maintaining and ensuring the smooth operation of the data center infrastructure. What is it that they do, exactly? Keep reading to find out.

First of all, there is a distinction to be made between a field technician and a field service engineer. They can perform a lot of the same tasks, but field service engineers also do configuration of the server systems, while a field technician does not. Field service engineers are found more often at companies that still have their own data center and have dedicated people in their IT team. Some external data centers offer managed services and employ them as well. This article will cover the job content of a data center field technician.

What does a data center field technician do?

A data center field technician’s day-to-day work will be in the data center, right where the action takes place. Their tasks are very specific to that environment, but they cover a wide range of responsibilities. Some of their work is plannable, like installations, but some is unpredictable. They need to be flexible and easily adapt to all kinds of circumstances.

A field technician’s main responsibilities include:

1. Installation: field technicians will install everything that the client needs to get their server equipment up and running, which will often happen in different stages. They will install power and connectivity, cabling to the client’s rack(s), connect the power cables to the right fuses and install cabling between customer rack(s)/rooms and the meet-me rooms. Meet-me rooms are where the client servers are connected to the different carriers. When everything is assembled, they will test the installation, provide touch-ups, and activate racks, access control and camera surveillance.
2. Room building: servers are not just stacked randomly into an empty room. When there are racks available, new servers can be stacked there, but of course at some point, the available space will run out. That’s why field technicians will also need to be able to transform an empty space into a server room with racks, cold corridors, and all necessary equipment.
3. Cable management: to keep the data center organised, proper cable management needs to be maintained. Field technicians are responsible for managing and organising cables to prevent issues, and to facilitate easy access for maintenance or repairs.
4. Troubleshooting: in case of issues and emergencies, field technicians need to identify the cause, resolve problems, and often also communicate with the client about this. Even though in a data center most systems are redundant, meaning there is a back-up system in place, there will always be a sense of urgency involved with troubleshooting, to limit the risk of everything going down at the same time.
5. Documentation: It is important that field technicians keep an accurate record of installations, troubleshooting, interventions, procedures… so that all documents can be consulted or reviewed if necessary. They will also provide certificates for clients after an installation is finished and approved.
6. Collaboration with other teams: field technicians will usually work closely with other teams in the organisation, for example the facilities and project teams. They need to communicate well with the other teams and will often work with them or support them in certain projects.
7. Functionality and cleanliness: field technicians will also be responsible for monitoring the daily functionality, tidiness and cleanliness of the data center.

Of course, every data center might have a slightly different job description, but the above provides a general idea.

What qualities make up a good data center field technician?

When it comes to education, there isn’t one singular program that will teach all the specifics of a data center, so field technicians must be interested in learning on the job. Usually, they will have a background in either electricity, connectivity, mechanics, etc., but on-the-job training is an important part of becoming a well-rounded field technician.

Field technicians will also need to be flexible and stress resistant. As mentioned above, some of the work is plannable, but when it comes to troubleshooting, not every day will be predictable. Not only that, but because a data center must be available for their customers 24/7, field technicians will regularly be on standby day and night.

Another important quality is the ability to work safely and securely. Data centers usually have extensive safety measures and procedures in place to limit the risks for their employees, clients and equipment. Field technicians will need to follow all the right procedures to work safely. Risks include working at height or below a raised floor, working with electrical installations, and so on, so safety is a big priority. Working in a data center can also be physically demanding, for example because of heavy lifting or working in unnatural positions, so physical health needs to be monitored.

In summary: data center field technicians have an extensive skill set. They need a combination of technical and problem-solving skills, while remaining flexible and working efficiently in a dynamic environment. They also need good communication skills, not only to communicate internally with other departments, but also externally towards customers. Field technicians are a vital link in ensuring the reliability and optimal functionality of a data center.

A data center is a highly secure and specialised building where servers and other critical infrastructure – such as networking equipment, storage, and power management – work together to support everything from cloud services to real-time communication. Data centers form the backbone of today’s digital world, ensuring data flows where and when it’s needed.

But what is inside a data center? Behind secured doors lies a world of precision, divided into dedicated data center rooms. These include server halls, cooling systems, uninterruptible power supplies (UPS), backup generators, and fire protection systems – all designed to ensure continuous, round-the-clock operations.

And don’t worry, you’re not seeing double. Inside a data center facility, everything is duplicated. It’s a principle called redundancy. By doubling critical infrastructure, a data center ensures that if one system fails, another takes over. Both systems operate independently to keep everything running smoothly, without interruption.

Explore the setup in detail via our interactive image. Just click on the numbers and learn more about each asset and its role.

1) Connectivity

A data center without connectivity is just a room full of blinking servers. What makes it truly valuable is its ability to connect with the outside world. In a data center, connectivity ensures that data can be accessed, transferred, and exchanged – anytime and anywhere. That’s why fibre cables enter the building through multiple, physically separated routes converging in what we call meet-me rooms.

Click on number 3 for a detailed explanation of how meet-me rooms function.

2) Physical security

Security is a top priority for data centers, and that includes physical security. To protect the large volumes of sensitive data stored on-site, data centers often implement multiple layers of physical safeguards. The outer perimeter is usually secured with gates, perimeter fencing, and controlled access points to prevent unauthorised entry. Inside the facility, measures such as keycard systems, surveillance cameras, and biometric verification add further protection. Each data center applies a combination of these tools to ensure only authorised personnel can access critical areas like server rooms. To complement these systems, trained security guards are usually present 24/7 to monitor activity, check credentials, and respond immediately when needed. Each data center combines these measures to create a highly secure environment from the outside in.

3) Meet-me room (MMR)

The meet-me room (MMR) is a secure, central hub for all connectivity within the data center. It’s where telecom carriers, service providers, and organisations connect to each other and to their clients. From the MMR, cross-connections are made to customer racks, cages, or private rooms throughout the facility. Because traffic is exchanged entirely within the data center, there is no need to route data through external networks, which significantly improves efficiency and performance. Some data centers are carrier-neutral, allowing customers to choose from multiple carriers and select the one(s) that best align with their business needs.

Click on number 1 to learn more about the importance of connectivity in data centers.

4) Server room

A standard data center hosts multiple—often hundreds or even thousands—of servers each supporting critical applications and data for different customers. These servers are typically housed in racks and cabinets located within access-controlled server rooms. To ensure optimal performance, the environment is carefully climate-controlled: temperature and humidity are continuously monitored and regulated to prevent overheating. Servers are interconnected using structured cabling and patching systems. Depending on their needs, customers can choose between a private client room or a shared (colocation) environment. Even in shared spaces, each client’s servers are securely isolated to ensure that only authorised personnel can access them.

5) Transformers

The main power feeds enter the data center from the external grid and are first directed to transformers. These transformers convert high or medium voltage into low voltage, making it suitable for use within the facility. The transformed power is then routed to Uninterruptible Power Supply (UPS) systems, which ensure a stable and continuous power supply to the data center infrastructure.

6) Uninterruptable Power Supply (UPS)

A data center must be able to rely on a continuous and redundant power supply. Since power outages can never be completely ruled out, robust backup systems are put into place to eliminate any risk of downtime. As mentioned earlier in the section on transformers (5), Uninterruptable Power Supply (UPS) systems play a crucial role in this setup. They provide instant emergency power from their batteries the moment the main feed fails. This ensures a seamless handover while the backup generators are automatically activated. A UPS can usually supply power for at least half an hour. That is enough time to bridge the gap between grid failure and generator takeover.

Click on number 7 to learn more about generators in a data center.

7) Backup generators

In the event of a blackout, backup generators take over as the primary power source until the issue is resolved. These generators, typically fueled by diesel or natural gas, will activate automatically when they detect an interruption of power, preventing any loss of power. This ensures that the data center remains fully operational at all times. Since generators take a few seconds to start, a UPS (see number 6) immediately supplies power to bridge that short delay.

Redundancy is essential here as well. It adds another layer of precaution: if the A feed fails, the B feed takes over seamlessly. Meanwhile, the UPS and backup generators ensure continuous power, even if both feeds are disrupted. Every layer supports the next to guarantee maximum uptime.

8) Cooling system

Just like your personal computer can warm up after running for a while, servers in a data center also produce heat during continuous operation. To keep everything running smoothly, data centers rely on advanced cooling systems that maintain a stable temperature and efficient airflow. However, as cooling consumes energy, it’s important to make data centers as energy efficient as possible. The effectiveness of a data center’s energy use is typically measured by its Power Usage Effectiveness (PUE). Lower PUE values indicate higher efficiency, meaning less energy is wasted on cooling and other non-IT operations. To achieve this, many data centers implement free cooling techniques, which make use of outside air or natural cooling methods to reduce reliance on compressors (most energy intensive component in cooling)—especially effective in colder or temperate climates as in Belgium.

Furthermore, from a sustainable point of view, it is important to use green power sources and know exactly where the electricity comes from. Ideally, it is locally generated renewable energy, which contributes to a more sustainable digital infrastructure. Finally, data center companies should minimise or eliminate the use of water for cooling, as it is a finite resource.

9) Fire detection and suppression systems

A data center is built with fire safety in mind to protect not only the equipment and data, but also the people working inside. Traditional fire extinguishing methods, such as water or foam, are unsuitable in this environment, as they can seriously damage sensitive electronic equipment. That’s why data centers are equipped with advanced fire suppression systems. These systems automatically release inert gases that reduce the oxygen level in the affected area to a point where fire can no longer sustain itself, without harming the equipment or endangering staff.

10) Network operations center (NOC)

In the Network Operations Center (NOC), thousands of data points are constantly monitored to ensure everything in the data center runs as it should. This includes temperature, humidity, power supply, connectivity, and the status of all critical systems. The NOC acts as the command center of the data center, overseeing performance, security, and availability in real time. It plays a key role in ensuring uninterrupted operations by detecting issues early, coordinating rapid responses, and scheduling preventive maintenance.