The Basement Server Room Under a Bathroom
Rivermark is a six-GP medical practice with 12,000 patient records. Its server and network cabinet sit in a converted basement storeroom directly below a staff bathroom. The room has one split air-conditioning unit, no temperature or humidity alarm, and no water sensor; a slow leak from the bathroom above has already stained one ceiling tile. The cleaners prop the door open with a chair while they work, and the key is kept in a cup in reception. The UPS is nine years old with original batteries and has never been load-tested. The only fire extinguisher in the room is a water type. The practice manager has €4,000 for improvements this year and wants to spend it on a second air-conditioning unit because the room 'gets hot in July'. The practice must keep seeing patients during any works.
1. Rank the physical and environmental risks in this room and explain which proposal you would not fund first, and why.
Read the worked answer
Rank by likelihood × impact, using the evidence available:
- Water ingress from the bathroom above. A stained ceiling tile is evidence of an active path, and the impact on servers and 12,000 patient records is severe. Highest priority.
- Door propped open and key in reception. Routine, unsupervised access by cleaners and anyone who finds the key; enables theft, tampering and physical damage, and undermines every logical control.
- Nine-year-old UPS with original batteries, never load-tested. Power events are common and an untested UPS often fails at the moment it is needed; sudden loss can corrupt the database and interrupt patient care.
- Heat in July. Real, but there is no monitoring data showing actual intake temperatures or failures, and the room already has one unit.
The second air-conditioning unit is not the first spend. It adds capacity to an unmonitored room without detecting when the existing unit fails, and it does nothing about the water path. It may become justified once temperature data shows a sustained problem - that is a decision to make with evidence, not comfort.
2. Propose how to spend the €4,000 and classify each measure as preventive, detective or corrective.
Read the worked answer
Priorities, with classifications:
- Water detection and diversion - sensor with alarm under the ceiling tile, drip tray, and cabling raised off the floor (about €500). Detective and preventive; if the leak can be redirected or the ceiling sealed, that is preventive.
- Access control - replace the key-in-a-cup with a keypad or badge lock, and agree a supervised cleaning procedure with the contractor (about €900). Preventive.
- UPS - replace the battery set, run a load test, and document the shutdown procedure (about €900). Corrective and preventive; an untested UPS is an assumption, not a control.
- Temperature and humidity monitoring with SMS alerts (about €300). Detective.
- Fire extinguisher - replace the water unit with CO₂ or another type suitable for electrical equipment, and confirm smoke detection (about €200–400). Corrective.
- Door alarm or reed switch on the storeroom to record openings (about €300). Detective.
That leaves a small contingency. If the ceiling cannot be protected cheaply, the remaining option is a plan to relocate the cabinet - a project, not a purchase, and worth flagging to management.
3. Why is the practice manager's claim that 'the room gets hot in July' not enough to justify the investment, and what evidence would you collect?
Read the worked answer
It is an observation without a measurement. 'Hot' has no threshold and no link to equipment failure. Servers tolerate a range of inlet temperatures, but the risk comes from exceeding the manufacturer's limits and from the air conditioner failing unnoticed. Without data, a second unit may spend money on a symptom while the real failure mode - an undetected outage of the single unit - remains.
Collect:
- Inlet-temperature and humidity readings over at least the coming summer, with alarm thresholds; inexpensive loggers make this possible.
- Equipment event logs: thermal warnings, fan speeds, unexplained reboots, and disk errors.
- The air-conditioning unit's service history, age and maintenance contract.
- Criticality and dependencies: which clinical and records systems sit in the cabinet and what downtime costs the practice.
Decide with the data. If the temperature repeatedly breaches limits, redundancy (two units, or a smaller second unit on a separate circuit) becomes justified. If it does not, the money is better spent on the leak, the door and the UPS battery - which the evidence already supports.