Network-critical Physical Infrastructure (NCPI) Vulnerability Assessment

Explanation: Network-critical physical infrastructure (NCPI) is the foundation upon which IT networks reside. It consists of power, power distribution, racks, cabling, cable distribution, cooling, and cooling distribution, as well as the servicing and management of these applications. The goal of the NCPI Vulnerability Assessment is to provide clients with a highly available network. APC channel partners may position this assessment as either a unique service offering or as part of existing assessments they perform such as: Network Assessments, Infrastructure Assessments, IP Telephony Assessments, Security Assessments, Server/Storage Assessments, Business Continuance, and Disaster Recovery Assessments. Instructions: APC partners fill out the assessment questionnaire with their client either face-to-face or over the phone. One full assessment should be completed for each location that their client deems mission-critical. Once complete, the partner forwards the assessment(s) to APC for review. APC will respond to the APC partner with a list of recommendations, which the client should consider implementing in order to maintain mission-critical levels of availability at the NCPI layer. Unless otherwise specified, the results of the NCPI assessment will be provided to the APC channel partner who submitted it, not directly to the client. Therefore, the partner may include the deliverable as part of a broader list of recommendations related to their clients needs. Assessments must be e-mailed or faxed to: E-mail: rita.katechis@apcc.com Fax: 401-789-3710 Assessment Done ___\___\___ Date Required Back ___\___\___ (Date) (Date)

Contact information: Channel Partner Information (all fields must be completed) Company Name ___________________________________________ Address _________________________________________________ City, State. Zip _____________________________________________ Sales Representative Name __________________________________ Phone (__ __ __)-__ __ __-__ __ __ __ E-mail _____________________________________ APC Support Team (if known) Field Sales Support Rep ____________________________ Inside Sales Support Rep ___________________________ Optional Client Information Business Name ____________________________________________ Address __________________________________________________ City, State. Zip _____________________________________________ Main Contact ______________________________________________ Phone (__ __ __) -__ __ __-__ __ __ __ E-mail _____________________________________________ Application: ________________________________________

NCPI Vulnerability Assessment: Questionnaire For Level One Assessments

1. Computer/Communications Room Environment A. How would you describe your environment at this site? (fill in # of each type of environment at this site) #_____Closet (1-2 racks) #_____Computer or Communications Room (3-10 racks/cabinets) #_____Mid-size Data Center, Computer or Communications Room (10-100 racks) #_____Large Data Center (100+ racks) #_____Other (description): ____________________________________________________ B. How many other sites does your IT/Communications network extend to? #_____ C. What types of sites are your other locations? Disaster Recovery Redundant computer/data center Main data center Regular Office space Other:_______________________ D. Do your other locations have a NCPI architecture similar to this location? Yes No If no, how are they different? ___________________________________________

E. What mission-critical applications/business processes are running in this environment? No SAN No NAS No VoIP No E-commerce Order Fulfillment Product development Production (Manufacturing) Accounting Payroll ERP Warehousing & Logistics Retailing (store operations) Professional services (legal, financial, consulting, etc.) CRM Other, please specify: _________________ F. What is the estimated cost if this environment were down for 1 hour? $ _____.____ G. Which of the applications/business processes in question B have redundant UPSs supporting them? Please list: ________________________________________________________________ H. What is the size of the closet/room? _____ Sq/Ft I. Does the closet/room have raised floor? Yes No J. Is there a dropped ceiling? Yes No K. Are you experiencing equipment failures that cannot be explained? Yes No L. Please complete the following: How many servers are in the room? How many servers are on the entire network? How many switches are in the room? How many switches are on the entire network? How many racks are in the room? How many racks are on the entire network? How many desktop computers are on the network? How many laptops are on the network? Current #_______ #_______ #_______ #_______ #_______ #_______ #_______ #_______ In one year #_______ #_______ #_______ #_______ #_______ #_______ #_______ #_______

M. How confident are you that your current NCPI architecture will allow you to operate for 1 full working day in the event of a blackout? (1= not at all confident, 5 = 100% certain. Id bet my job on it.) Rank _______ N. How many single points of failure exist in your NCPI architecture today? #______ Please explain________________________________________________________________ O. Do you have any concerns about your computer rooms ability to deal with high power/heat density equipment such as blade servers? Yes No If yes, please explain: ___________________________________________________________ P. Do you own your building or is it a leased space? Own Lease If leased, remaining duration of the lease? _____ Months/Years Q. Who is the person in your company that is responsible for business continuity and IT system availability? Name_________________ Title____________ Phone___________ E-mail________________ R. Who are the key contacts for gathering information about power, cooling and rack systems at this location? building owner building electrician electrical contractor consulting engineer IT manager other, please explain: _______________ 2. Racks A. Type of rack/cabinet: Enclosure ____ Height (U) ____ Width ____ Depth ____ Open 4-post ____ Open 2-post ____ A1. Rack brand/vendor: __________________ A2. Rack model: _______________ A3. # of power receptacles per rack (average): __________ B. Type of power distribution system to racks (check one) Overhead Under floor Other (description): __________________________ C. Is it difficult to run power/data cables to new/existing equipment in the rack? Yes No

D. Are there enough outlets for existing/additional equipment in the rack? Yes No 3. Power A. How many UPSs do you have in the following kW ranges? ____ 0-3kW ____ 3.1-5kW ____ 5.1-10kW ____ 10.1-20kW ____ 20.1-40kW ____ 40.1-80kW ____ 80.1kW+ B. What is the average age of the UPSs (estimate)? _________ C. How many of the UPSs are currently out of warranty? #________ D. What is the estimated total load of IT equipment that needs UPS protection (add up kW of all mission-critical equipment needing power protection)? _______ kW E. In the event of a power outage, how much runtime will your current NCPI architecture provide the network? ______ Minutes F. How much runtime would you ideally like to have? ______ Minutes G. When were the batteries last replaced? ____ Years H. Have the UPS or batteries ever failed under power failure conditions? Yes No J. Is the location backed up by a generator? Yes No If yes: J1. What is the capacity of the generator(s)? ____ Qty _____kW J2. What is the total current load on the generators? _____kW J3. How much time does it take for the generator to start up in the event of a power outage? ____Seconds _____Minutes J4. How much runtime will the generator deliver in the event of a power outage? _____ Minutes ____ Hours 4. Cooling A. Is there an existing cooling solution in the closet or room? Yes No (if no, skip to section 5B)

If yes: A1. Is the cooling solution dedicated to the computer room or part of the building A/C system? _____ Dedicated _____ Building system A2. Cooling System Brand/Manufacturer: ___________ A3. Age of cooling system: ________ Years A4. Type of cooling system (check all that apply) ____ Floor mount ____ Ceiling mount ____ Portable spot cooling A5. Is the cooling system SNMP manageable? Yes No B. Are the racks/cabinets in the computer/communications room laid out in rows set up in a hot/cold aisle configuration? (hot/cold aisle configuration = front side of racks/cabinets face each other & back sides of racks/cabinets face each other) Yes No B1. If yes to B, are cooling units located perpendicular to the aisles? Yes No C. Are blanking panels used to help with airflow in areas of cabinets where no equipment is installed? Yes No 5. Environmental Monitoring & Management A. What is the client's strategy for managing NCPI across their entire network? (Check all that apply) Centralized SNMP management utilizing a network management tool, such as HP OpenView, Tivoli, etc. Vendor-proprietary management system, such as PowerChute plus. Manual checks of equipment via a regular maintenance program or equivalent. Utilization of a building management tool, such as Johnson Controls or equivalent. No management strategy in place for NCPI.

B. What is the client's current strategy for monitoring & managing the health of their UPS batteries? (Check all that apply) Centralized SNMP management utilizing a network management tool, such as HP OpenView, Tivoli, etc. Vendor-proprietary management system such as PowerChute plus. Manual checks of equipment via a regular maintenance program or equivalent. Utilization of a building management tool such as Johnson Controls or equivalent. No management strategy in place for all NCPI.

C: What is the client's current strategy for monitoring the temperature of their room/rack? (Check all that apply) Monitors temperature of the room via local thermostat. Remotely monitors temperature of the room. Monitors temperature of individual rack via a thermostat. Remotely monitors temperature of the individual racks. Doesn't really monitor - utilizes ad hoc maintenance or other program. D: What is the client's current strategy for managing access/security? (Check all that apply) Remotely manage door sensors. Room-level security such as key lock, retina scan, punch card. Remotely managed locks on racks. No strategy in place. 6. Service A. Is the client concerned about the quality of service on NCPI equipment? Yes No B. Is the client concerned about the cost of service on NCPI equipment? Yes No C. What is the length of the current service contract on UPSs? _____ Years D. When will the current service contract finish? ____/____ Date (month/year) 7. Future Plans A. Has the client put a plan in place to address the need for flexibility/adaptability in their NCPI architecture to account for unpredictable, changes/growth in their IT environment? Yes No If no, are they interested in receiving guidance in this area? Yes No B. Is the client planning to move to a new location within 5 years? Yes No Maybe C. Is the client planning to consolidate or move IT equipment at this location within 1 year? Yes No

D. What improvements would the client like to make to the current computer room? UPS Explain: _____________________________________________________________ Power Distribution Explain: _____________________________________________________________ Racks Explain: _____________________________________________________________ Cable Management Explain: _____________________________________________________________ Cooling Explain: _____________________________________________________________ Management Explain: _____________________________________________________________ Service Explain: _____________________________________________________________ Availability/Uptime Explain: _____________________________________________________________ Aesthetics Explain: _____________________________________________________________ Please provide a diagram of the location on the graph.

2003 American Power Conversion Corporation. All Trademarks are the property of their owners. E-mail: esupport@apcc.com 132 Fairgrounds Road, West Kingston, RI 02892 USA DSN-0748