(NIST PE2) (UTS165 S-2, S-3, S16, S22)

Individuals requiring access to any UDC Facility, Critical Infrastructure, or Data Hall, will either be an authorized individual with badge access, or a visitor. Below are the provisioning requirements for badge access and visitor access for each location. Existing exceptions and additional requirements, specific to SER and COM locations, are detailed as well.

All Badge Access Requests should be submitted to udc-request@austin.utexas.edu with your contact phone number, your EID, and the area or areas you would like to have access into. Please include your manager’s EID and your manager’s contact phone number. If you have an urgent request, you can dial 512.471.0007.

Physical access to the facility shall not be granted on an “emergency” basis to individuals who have not obtained proper authorization. In the event that an authorized staff member is not available, the department Director will need to provide written authorization for unescorted access.

Access requests must be renewed annually to maintain approved access. Access permissions are reviewed quarterly. Managers shall notify the UDC immediately when access is no longer required due to an employee’s termination or a change in job responsibilities.

Provisioning Requirements for Badge Access to CRB, SER, COM, EER

UDC Facility

• Authorized individuals requiring access to common area/offices
  
  • Access facility at least once in a 6 month period
• Must be a UT Austin Staff, Faculty or Employee of Contractor and possess proper credentials
• Obtain approval from departmental Manager or Sponsor and UDC Management through a ticket request
• Authorized individuals requiring access to electro/mechanical infrastructure for the purpose of regular, scheduled or routine maintenance.

UDC Infrastructure

• Authorized individuals requiring access to electro/mechanical infrastructure for the purpose of regular, scheduled or routine maintenance.
  
  • Access facility at least once in a 6 month period
• Must be a UT Austin Staff, Faculty or UT Employee of Contractor and possess proper credentials
• Must have approval from departmental Manager or Sponsor and UDC Management through a ticket request
• Authorized individuals requiring access to data hall

UDC Data Halls

• Authorized individuals requiring access to data hall
  
  • Access data hall at least once in a 30 day period
• Must be a UT Austin Staff, Faculty or UT Employee of Contractor and possess proper credentials
• Must obtain approval from departmental Director and UDC Director through a ticket request

UDC Carrier Space

• Authorized individuals requiring access to Carrier Space
  
  • Access Carrier Space at least once in a 6-month period
• Must be a UT Austin Staff, Faculty or UT Employee of Contractor and possess proper credentials
• Must obtain approval from departmental Director and UDC Director through a ticket request

Provisioning Requirements for Visitor Access to CRB, SER, COM, EER

A Visitor is defined as someone who does not have badge access to the facility, critical infrastructure or data halls located in the data center.  There are two types of visitors, unescorted and escorted.  Below is the criteria for both by area:

UDC Facility

     Unescorted

• Must be a UT Austin Staff, Faculty, or UT Employee of Contractor (Option A or B)
• Have a scheduled purpose or business reason to be in the facility
• Access is granted via UDC personnel physically or remotely

     Escorted

• All other individuals that do not have badge access or meet the criteria of unescorted visitor
• Visitor must be escorted by a UDC Employee at all times
• Must have UDC Management approval

UDC Infrastructure

     Unescorted

• Must have an associated ticket/work order
• Must be a UT Austin Staff, Faculty, or UT Employee of Contractor (Option A or B)
• Access is granted via UDC personnel physically or remotely
• UDC Facilities must be notified of arrival

     Escorted

• Must have an associated ticket/work order
• Visitor must be escorted by a UDC Employee at all times
• UDC Facilities must be notified of arrival
• Must have UDC Management approval

UDC Data Halls

     Unescorted

• Must have an associated ticket/work order
• Must be a UT Austin Staff, Faculty, or UT Employee of Contractor (Option B only)
• Authorized administrator/owner of a device located within the data hall verified through the DCIM
• Written approval may be granted by authorized System Administrators for representatives to work on their behalf
• UDC Facilities may authorize access when visitor is working with Critical Infrastructure in a Data Hall
• UT or Government issued ID must be confirmed
• Must sign into the Visitor Log and wear Visitor Badge

     Escorted

• All individuals that do not have badge access or meet the criteria of unescorted visitorUT or Government issued ID must be confirmed
• Visitor must be escorted by an authorized (badge access) employee at all times
• Must have UDC Management approval
• Must sign into the Visitor Log and wear Visitor Badge

UDC Carrier Space

     Unescorted

• Must have an associated ticket/work order
• Must be a UT Austin Staff, Faculty, or UT Employee of Contractor (Option A or B)
• Authorized administrator/owner of a device located within the Carrier Space verified through the DCIM

     Escorted

• All individuals that do not have badge access or meet the criteria of unescorted visitor. 
• UT or Government issued ID must be confirmed
• Visitor must be escorted by an authorized (badge access) employee at all times
• Must have UDC Management approval

Vendors, 3^rd Party Vendors and Trusted Vendors

Vendors, 3rd party vendors and trusted vendors may have access to Facilities, Critical Infrastructure and Data Halls like any other UT employee.  To be unescorted, Vendors must have proper credentials, including a UT ID Card.  Employee of Contractor – Can be assigned up to 1 year and must be renewed.

          Options A

• • Treat Like an Employee (0% appt)
  • UT ID Card (building access)
  • Public Network Access

          Options B

• • Official Visitor
  • UT ID Card (building access)

     Data Halls

• Vendors may conduct work on behalf or in lieu of an authorized System Administrator.
• A System Administrator must authorize in writing and confirmation of eligibility through the DCIM is required prior to approval.
• UDC Facilities may authorize access when visitor is working with Critical Infrastructure in a Data Hall

     Carrier Space

• Vendors may conduct work on behalf or in lieu of an authorized System Administrator.
• Authorized owner of a device located within the Carrier Space verified through the DCIM.

Location Specific Exceptions

COM Exceptions

     COM Data Hall

• Access to COM Data Hall doesn’t give you access to NOC B and vice versa
• NOC B and Data Hall approval is granted by the UDC Director
• NOC B doesn’t have a Visitor Log
• Visitors - Unescorted or Escorted can be allowed in by any ITS personnel with Badge provisioning to the Data Hall

     COM Facility

• Visitors – Unescorted or Escorted can be allowed in by any ITS personnel with Badge Provisioning to the Facility

SER Exceptions

     SER Data Hall

• Access to SER Data Hall also gives you access to NOC A (same area)
• Access approval is granted by the UDC Director
• Visitors - Unescorted or Escorted can be allowed in by any ITS personnel with Badge provisioning to the Data Hall
• Only badge provisioned employees should be allowed in the SER Data Hall/NOC A due to fire suppression system

     SER Facility

• Visitors – Unescorted or Escorted can be allowed in by any ITS personnel with Badge Provisioning to the Facility
• 3 doors to provide 2 layers of entry need to be controlled by UDC (Not Current)
• The 3 doors do not have any communication (intercoms) back to UDC Command

EER Exceptions

     EER Carrier Space

• Access to EER Carrier Space does not provide access to EER Data Hall
• Visitors - Unescorted will have Badge Provisioned access equivalent to Data Halls (ex. LEARN)
• Access approval is granted by Networking Director
• Carrier Space does not have a Visitor Log