EXIN EPI Certified TIA-942 Internal Auditor key terms

A telecommunications industry standard that specifies requirements and guidelines for data centre infrastructure, covering site location, architectural layout, electrical and mechanical systems, cabling, redundancy and security. Auditors use it as the criteria against which a data centre's design and operation are evaluated.

The condition in which a data centre's documented and observed characteristics satisfy the mandatory and optional clauses of the standard for a claimed rating. Conformance is assessed per requirement, not as a single pass or fail verdict, and depends on evidence of both design and implementation.

A defined area within a data centre dedicated to housing cabling, termination hardware, and active equipment, such as entrance rooms, main distribution areas, horizontal distribution areas, and equipment distribution areas. Each space has specified functions, access rules and separation requirements.

The space where external telecommunications and service provider cabling enters the data centre and is terminated before distribution to other areas. It typically contains demarcation points and carrier equipment and should be separated from the computer room to limit access and physical risk.

The central cross-connect space in a data centre, usually within the computer room, where the main network and storage cabling is consolidated and from which distribution to horizontal and equipment areas is made. It houses core switches, routers and primary patch panels.

A space that provides cross-connection between the main distribution area and the equipment distribution areas, serving as a distribution point for cabling to cabinets and racks. It reduces cable congestion and supports structured cabling management and change control.

The area within the computer room where cabinets and racks holding servers and storage are located and where horizontal cabling is terminated. It is the final point of the cabling hierarchy from the horizontal distribution area to the active equipment.

A facility or patch panel arrangement that allows cabling from different systems or directions to be interconnected or rearranged without moving the permanent cabling. Cross-connects enable structured administration, flexible reconfiguration, and clear separation of cabling responsibilities.

A fault-tolerant configuration in which any single component failure, including a maintenance event, does not interrupt the supported load, and the infrastructure has sufficient capacity and distribution paths to sustain concurrent maintenance. It is the highest of the standard's four reliability levels.

A concurrently maintainable configuration in which any planned maintenance activity on a component or path can be performed without shutting down the supported load, but an unplanned failure may cause disruption. It generally includes redundant capacity components and multiple distribution paths.

The provision of additional capacity, components, or distribution paths beyond the minimum needed to support the load, so that a failure or maintenance action does not cause loss of service. The degree and configuration of redundancy determine the achievable rated topology.

A redundancy arrangement in which one additional component or capacity unit beyond the required number is installed, so that the failure of any one unit leaves enough capacity to carry the load. It provides component redundancy but not necessarily path redundancy.

A redundancy arrangement in which two complete, independent systems or paths each have full capacity to carry the load, so that one can be taken out of service while the other supports operations. It supports higher rated topologies when distribution and maintenance are also addressed.

A property of infrastructure allowing any capacity component or distribution path to be removed from service for planned maintenance while the supported load continues without interruption. It is a defining characteristic of the higher rated topologies and a frequent audit focus area.

A component or path whose failure alone causes loss of the supported load or a significant service interruption. Identifying such points is central to assessing whether a claimed topology rating is actually achieved in the installed infrastructure.

A system that provides conditioned electrical power to critical loads from batteries or another stored-energy source during a utility outage or disturbance, bridging the gap until generators or other sources take over. Its capacity, autonomy and distribution arrangement are audited for redundancy and load support.

The route by which power travels from the utility connection through transformers, switchgear, uninterruptible power supplies, and panelboards to the critical loads. The number and independence of such paths largely determine whether concurrent maintenance and fault tolerance are achievable.

The arrangement of mechanical equipment, piping, and air or liquid distribution that removes heat from the computer room and equipment. Redundancy and independence of cooling paths are assessed together with power paths when verifying a claimed topology rating.

An independent, objective assurance and consulting activity designed to add value and improve an organisation's operations. It evaluates risk management, control and governance processes against defined criteria and reports conclusions to management and those charged with oversight.

The standards, policies, requirements or benchmarks against which audit evidence is compared to reach conclusions. In a TIA-942 internal audit, the standard's clauses plus the organisation's own policies and contractual obligations typically form the criteria set.

A statement defining the boundaries of an audit, including the organisational units, physical areas, systems, time period and requirements to be examined. A clear scope prevents gaps and disputes about what the audit does and does not cover.

A concise statement of what a specific audit is intended to achieve, such as determining whether a data centre's documented topology matches its installed infrastructure. Objectives guide the design of tests and the reporting of conclusions.

A documented plan setting out the audits to be performed over a period, their objectives, timing, resources and coverage, often prioritised by risk. It translates the organisation's assurance needs into a scheduled and resourced series of engagements.

The detailed working plan for a single engagement, covering scope, objectives, criteria, sampling approach, tests to be performed, responsibilities and timetable. It is prepared before fieldwork and may be adjusted as evidence emerges.

An approach that allocates audit effort according to the likelihood and impact of failures or nonconformities, focusing on areas of greatest significance to the organisation. It ensures limited audit resources are directed where assurance matters most.

The freedom of auditors from conditions that threaten their ability to reach impartial conclusions, including personal, financial or operational involvement in the activity being audited. Independence underpins the credibility of findings and is a core ethical requirement.

An unbiased mental attitude that allows auditors to perform engagements so that they believe in their work product and no quality compromises are made. It requires auditors to set aside personal preferences and avoid being influenced by auditees or management.

Information collected during an audit that supports conclusions and findings, obtained through inspection, observation, enquiry, recalculation, confirmation or analysis. Evidence must be sufficient, relevant and reliable for the conclusion it is intended to support.

The measure of how much evidence is needed to support an audit conclusion, judged by its quantity and reliability. Stronger, more independent evidence reduces the amount required; weaker or hearsay evidence requires corroboration.

The selection of less than all items in a population to obtain and evaluate evidence about some characteristic of that population. Sampling may be statistical or judgemental, and the basis for selection should be documented and defensible.

Records prepared or obtained by auditors that document the work performed, the evidence gathered, and the conclusions reached. They provide the basis for the audit report and demonstrate that the engagement was properly planned and executed.

A record of activities, changes and approvals that allows an auditor to trace a transaction, configuration or decision from origin to outcome. Its completeness and reliability are often tested when verifying data centre change management and access control.

A documented failure to meet a specified requirement, either of the standard or of the organisation's own policies. Nonconformities are graded by severity and must be supported by objective evidence and a clear statement of the requirement not met.

An audit comment that identifies a weakness or improvement opportunity which does not constitute a failure to meet a specified requirement. Observations are often reported separately from nonconformities and may be advisory in nature.

The result of evaluating collected evidence against audit criteria, expressed as conformity, nonconformity or an observation. Findings should state the condition, the criteria, the evidence, and the effect or risk arising from the gap.

Action taken to eliminate the cause of a detected nonconformity or other undesirable situation and prevent recurrence. It differs from correction, which merely fixes the immediate problem, and should be proportionate to the risk involved.

A structured investigation to identify the underlying reason a nonconformity occurred, rather than simply describing its symptoms. Effective corrective action depends on a sound root cause, and auditors examine whether the analysis went beyond superficial explanations.

The process of verifying that agreed corrective actions have been implemented and are effective within the stated timeframe. Follow-up closes the loop between an audit finding and demonstrated improvement and is tracked in a register of open actions.

An ongoing process of enhancing performance by identifying opportunities, implementing changes and evaluating results, rather than addressing only isolated failures. Auditors assess whether improvement activities are planned, measured and sustained over time.

A periodic, structured evaluation by senior management of the adequacy and effectiveness of controls, audit results, risks and improvement actions. It provides the governance link between audit findings and decisions on resources, priorities and policy.