WMU > OIT > Rules & Policies

Revised: 6/2008

OIT Server Room Access Policy

Purpose

The purpose of the Server Room Access Policy is to establish rules and procedures for accessing the Office of Information Technology's server room.

Scope

The Office of Information Technology (OIT) server room is a limited access area. Only personnel requiring constant or regular access to this area have card access to it. All requests for access to the OIT server room area must be approved by the Production Operations Manager or the Director of Systems and Operations.

Policy Statement(s0

Two types of server room access — card and visitor — are permitted. Card access is restricted to OIT staff who require regular access to the server room to perform their job, or WMU emergency personnel for site emergencies only. Visitor access is restricted to non-OIT departmental staff, vendors, or service personnel that are listed on the approved "OIT Server Room Sign-in Access List". Procedures regarding access requests, viewing, or touring the OIT server room are provided below.

Procedures

Card Access
Individuals with card access to the server room are responsible for ensuring the area remains secure upon entering or exiting. This includes deactivating and activating server room alarms when Production Operations staff is not onsite. Individuals without server room card access must follow one of the appropriate procedures below.

Visitor Sign-in Access
Individuals on the "OIT Server Room Sign-in Access List" may have monitored access to the server room area. These individuals can enter the server room area with supervision. For each access, they are required to record the following in the server room area log book: date, name, company or department, reason for entry, in time, and out time. The individual receives a dated visitor badge from the Production Operations staff. The badge must be worn at all times while in the server room, and returned to Production Operations staff when the individual leaves the server room.

Access Requests
Anyone without card or visitor access must request escorted access prior to being permitted to enter the server room area. Individuals must enter the server room area through Room 1010, Production Support. The Production Support staff will contact the Productions Operations Manager for access authorization every time access is requested. If the Production Operations Manager is unavailable, Production Operations staff will contact the Director of Systems and Operations to obtain access authorization. If the access request is approved, the visitor must follow the Visitor Sign-in Access procedure and will be escorted at all times by an OIT staff member with card access while in the server room.

Viewing or Server Room Tours
Requests for viewing the server room area through the windows must be approved by the Production Operations Manager or the Director of Systems and Operations.

Requests for tours of the server room area must be in writing and presented to the Production Operations Manager or the Director of Systems and Operations at least two weeks prior to the requested tour. Tour requests will be presented to the CIO of Information Technology for approval prior to scheduling a tour.

Enforcement

Individuals requiring access to the server room, or wishing to view or tour the server room, shall abide by the rules of this policy. Any person found to be in violation of this policy, will be subject to appropriate disciplinary action as defined by current University policy and/or applicable collective bargaining agreements.