A four-year-old certificate, a self-audit and a manual bypass
The marketing page of a 5,000 square metre commercial data centre states 'TIA-942 Rated-4 Certified, fully fault tolerant'. The evidence pack you are given contains: a certificate issued four years ago to the design consultancy that also designed the electrical and mechanical systems; a scope statement naming 'Building A, design documents only'; no listing for Building B, commissioned eighteen months ago and sold under the same claim; no surveillance audit reports for the last two years; and one as-built deviation in Building A, where a single transfer pump sits between the day tanks and the generators. The operator's compliance officer argues that because the pump can be bypassed manually 'in about fifteen minutes, with a spanner', the fault-tolerant claim still holds. A prospective tenant is being asked to sign a five-year contract and has requested evidence of the certification before signature.
1. Assess the certification claim and rank the deficiencies by severity, including how you would verify each one.
Read the worked answer
The claim fails on four independent grounds, and severity is not the same as paperwork volume.
Scope and subject. A design-documents certificate attests to intent, not to the constructed facility. Nothing in the pack shows that Building A was built as designed, and Building B has no certificate at all. Selling Building B under the same claim is active misrepresentation, not an administrative lapse, and it is the most severe item because a customer is being induced to contract on a false basis.
Independence. The design consultancy auditing its own electrical and mechanical design is self-review. Its findings should be treated as unverified, and the audit programme itself is compromised.
Validity and surveillance. A four-year-old certificate with two years of missing surveillance cannot be relied on. Verify against the issuing body's published scheme and register, including the stated validity period and surveillance requirements, rather than the operator's website. Do not assume a validity period; read the scheme.
Substance. The as-built single transfer pump contradicts a fault-tolerant claim on its face, regardless of the documents.
2. Is a fifteen-minute manual bypass with a spanner acceptable evidence of fault tolerance? Give your reasoning.
Read the worked answer
No, and the reasoning turns on the difference between maintenance and failure.
Fault tolerance means a single component failure does not affect the IT load. The pump failing is an unplanned event; the load is affected the instant the pump stops, before anyone finds a spanner. A bypass that requires a person to be present, to diagnose the problem, to locate the valve, and to execute a sequence under pressure does not remove that effect. It inserts a human response into the availability chain, and human intervention under incident stress is one of the least reliable elements available.
Concurrent maintainability is the weaker claim that might be made for a planned task, and even that requires a written method of procedure, a validated valve line-up, prior testing, and a demonstration that the IT load is unaffected throughout. Nothing in the evidence pack shows any of this.
The compliance officer's argument also quietly concedes the point: if a manual bypass were sufficient, the facility would be describing a maintainable single point of failure, which is exactly what a fault-tolerant claim denies.
3. What should the prospective tenant do before signature, and what remediation path should the operator follow?
Read the worked answer
For the tenant: do not accept a marketing page as evidence. Request the certificate itself, in the operator's name, with its exact scope, issue date and validity, and verify it directly with the issuing body's register. Ask separately for construction-stage and operational-stage evidence for the specific building being leased. Ask who performed the audit and whether they had any design or build role; independence is a condition of assurance, not a formality. Then put the certification claim into the contract as a warranty with a defined remedy, so the risk sits with the party making the claim.
For the operator: withdraw the Building B claim immediately, correct the marketing, and re-scope any statement to the certified entity only. Commission an independent audit of the as-built facility by a party with no design or build involvement, covering the transfer pump arrangement. Then either install genuine redundancy at the pump or negotiate the certified rating down honestly. A downgraded, accurate claim is commercially survivable; a false one is a contract dispute and a reputational event waiting for its first outage.