/policies/,/policies/administrative/,/policies/administrative/uwmf/,/policies/administrative/uwmf/uwmf-wide/,/policies/administrative/uwmf/uwmf-wide/information-services/,

/policies/administrative/uwmf/uwmf-wide/information-services/in-pol--001.policy

201504119

page

100

UWHC,UWMF,

Policies,Administrative,UWMF,UWMF-wide,Information Services

Data Center Access (IN-POL- 001)

Data Center Access (IN-POL- 001) - Policies, Administrative, UWMF, UWMF-wide, Information Services

IN-POL- 001

POLICY




Information Services
Effective Date:
06/20/2014
Administrative Manual

X Other: Information Services
Policy #: IN-POL-
001

X Revision
Total #
Pages: 3 Title: Data Center Access Policy


I. PURPOSE

This policy defines the requirements and methods for obtaining access to UW Health IS
Data Centers and IS Computer Rooms. There are three existing locations and one
planned future location:

ξ Excelsior Data Center - 8501 Excelsior Drive, Madison, WI, 53717
ξ AOB Data Center - 7974 UW Health Court, Middleton, WI, 53562
ξ IS Computer Room - 1 S. Park (card access controlled by Meriter at this facility)
ξ IS Computer Room - The American Center (TAC) planned for August 2015

SCOPE

This policy applies to any person seeking admittance to UW Health IS Data
Center/Computer Room facilities other than Operations personnel who staff the
Excelsior Data Center.

II. DEFINITIONS

Access Card: UW Health issued photo id proximity card
DCO: Data center operator
EID BF: UWHC Employee ID Badge Form
IS: Information Services
NEID BF: UWHC Non-Employee ID Badge Form
Operations Personnel: Computer operators who staff the Excelsior Data Center
Visitor: Person entering a data center or computer room other than Operations
personnel

III. POLICY
UW Health IS data centers and computer rooms are secure, limited-access facilities.
Access by proximity card is limited to specific individuals with a UW Health issued photo
ID card that have been approved for access by the IS Director – Systems Security (or
the IS Security Consultants, if the Director is not available).




Page 2 of 3

A. Authorized Visitors

Authorized visitors include:
1. UW Health IS staff with a business reason for access
2. UW Health non-IS staff managing departmental equipment
3. Non-UW Health staff managing their organization’s equipment
4. Non-UW Health staff (i.e., vendors) contracted or requested to assist UW Health
with maintaining, installing, configuring, or troubleshooting equipment as
authorized by staff specified in 1, 2, or 3 above

All other visitor entry is granted on a case-by-case basis and all visitors must be
accompanied by an authorized individual specified in 1, 2, or 3 above, or by
Operations personnel, if at the Excelsior location.

B. Staffing

Only the 8501 Excelsior Data Center is staffed by Operations personnel.

C. Access Monitoring

1. Access cards control entry into these facilities. Entry and exit is electronically
monitored by various security departments (UWHC Security, UWMF Security, or
Meriter Security). Access card activity reports are available upon request.
2. At the Excelsior Data Center, IS Operations personnel observe visitor entry and
exit activity within the facility and maintain an on-line log book of events.
3. On an annual basis, the IS Director – Infrastructure, working in conjunction with
UWHC and UWMF Security, audits the list of authorized visitors for the Excelsior
data center, the AOB data centers, and 1 S. Park computer room to ensure all
access is still appropriate.

IV. FORMS

NEID BF Form (on U-Connect)

1 SP Badge ID/Access Request Form (on U: drive)

V. PROCEDURE

The following procedures support this policy:

Data Center Access Procedure




Page 3 of 3

VI. OTHER

UW Health is not a legal entity. UW Health comprises three separate entities. This policy
applies to facilities and programs operated by the University of Wisconsin Hospitals and
Clinics Authority and the University of Wisconsin Medical Foundation, Inc., and to clinical
facilities and programs administered by the University of Wisconsin School of Medicine
and Public Health.

Each entity is responsible for enforcement of this policy in relation to the facilities and
programs that it operates.

VII. COORDINATION

The details of Coordination of UWHC, UWMF and UWSMPH are shown below. Approval
and coordination of this policy by those entities occurs per their individual processes.

UWHC Sr. Management Sponsor: UW Health IS CTO
UWHC Author: UW Health IS Director - Infrastructure
UWHC Reviewers: UW Health IS Directors
UWHC Approval committee(s): UWHC Internal Auditor

UWMF Sr. Management Sponsor: UW Health IS CAO
UWMF Reviewers: UW Health IS Directors

UWSMPH Approval: UW Administrative Legal Services

VIII. SIGNED BY


[Insert Signature Block(s) for Appropriate Signer] Date


[Insert Signature Block(s) for Appropriate Signer] Date