Server room - flood risk

A Server room is flooded after heavy rain

Data Centre / Computer Room location

The location of the central computer facility should not be advertised on signs, maps, or directory listings of the organization.

Computer centres should be located away from environmental hazards such as oil and gas storage depots, areas where flooding is regular, airport flight-paths, etc.

In multi-storey buildings, the computer facility should be located above ground level if there is a risk of external penetration and/or flood damage. Computer equipment should not be located in basement areas where flood water could collect.

The computer facility should be physically separated from other departments within the organization.

References:
http://www.theiia.org/itaudit/index.cfm?act=ITAudit.archive&fid=199
http://www.theiia.org/itaudit/index.cfm?act=ITAudit.archive&fid=200
http://www.theiia.org/itaudit/index.cfm?act=ITAudit.archive&fid=189

Information Security - Office security

Smokers as an IT security risk?

A U.K. firm is claiming smokers pose a risk to IT security by leaving doors open when they take a puff break. Network World investigates