Vendor Access at a Colocation Data Center
At a Tier III colocation data center, a tenant schedules a four-hour maintenance window for a UPS battery replacement. The vendor brings six technicians, but only two are on the approved access list. The site has a two-person integrity rule for the customer cage, a cabinet door alarm that has been in maintenance bypass for nine days, and a loading dock that shares a corridor with the tenant cage. The security officer on duty is a 22-year-old contract officer with six months of experience. The vendor lead asks the officer to 'just badge us all in; we're behind schedule.' The officer calls the shift supervisor, who is off-site and says, 'Use your judgment, but don't delay the work.' The tenant facilities manager is not on site but texts approval for 'the team.' CCTV covers the corridor, but the cabinet row has a blind spot. The maintenance window starts in 20 minutes.
1. What should the officer do in the next 20 minutes? Identify the decision rules and escalation path.
Read the worked answer
Decision rules: only badge-approved persons; enforce two-person integrity for the tenant cage; do not accept a bypassed cabinet alarm without a compensating control; do not treat a vague text as authorization for unnamed people.
In the next 20 minutes:
- Hold the vendor at the loading dock, not in the corridor. Confirm identities against photo ID and the approved list.
- Call the tenant facilities manager by phone. Read back names and ask for written email approval for the additional four, including scope and duration. A text saying 'the team' is not sufficient.
- Call the contract security supervisor and state the conflict: 'Policy requires the approved list and two-person integrity. I am not admitting unapproved technicians. I need your decision now.' If the supervisor cannot decide, escalate to the security account manager and client duty manager.
- Allow only the two approved technicians to enter, with escort and the two-person rule. If the work cannot proceed safely, reschedule.
- Document the delay, names, times, calls, and who authorized what.
The junior officer is correct to pause. The operational risk of delaying a battery replacement is real, but the security and contractual risk of admitting unverified persons into a tenant cage is greater.
2. Evaluate the supervisor's instruction. What are the risks of 'use your judgment' in this context?
Read the worked answer
'Use your judgment' is not a decision rule. It transfers accountability to the least experienced person after the supervisor has heard the facts. In access control, judgment must be bounded by policy: approved list, tenant authorization, escort, two-person integrity, and alarm-bypass rules. The instruction creates three risks: unapproved personnel in a secure cage; an undocumented exception the client may later dispute; and inconsistent treatment of vendors. If the officer admits the six and something goes missing, the officer is exposed. If the officer refuses and work is delayed, the supervisor may blame the officer. The supervisor should come to site, designate a qualified escalation contact, or give a clear yes or no based on verified authorization. The supervisor should also have known the cabinet alarm was bypassed for nine days; that is a program failure, not an officer failure.
3. What program-level fixes should be recommended after the maintenance window, regardless of the outcome?
Read the worked answer
- Pre-access checklist: approved names, photo IDs, work order, tenant authorization, escort, after-hours contact, and alarm-bypass status. No checklist, no access.
- Vendor access list: a 24-hour update rule; additions require tenant and security-manager approval.
- Alarm-bypass policy: maximum 24 hours, compensating control such as escort or temporary monitoring, logged and signed off by a manager. Nine days is unacceptable.
- Two-person integrity: written into the contract and enforced; if the vendor cannot provide two approved persons, reschedule.
- CCTV: fix the cabinet-row blind spot with an additional camera or mirror.
- Training: teach contract officers escalation and stop-work authority, and include this scenario in post training.
- Audit: review loading-dock and corridor access weekly.
- After-action review: meet with the tenant and vendor and document lessons.