By the SightShield team · · 3 min read
More data, more hardware, more risk
India’s data-centre capacity is growing fast — CBRE estimated around 1.7 GW of operational capacity at the end of 2025, heading towards 2 GW by the end of 2026 and more than 3 GW by 2028, driven by cloud and AI. Bengaluru is one of the emerging hubs. Most businesses do not run data centres, but almost every office now has a server room or network rack that holds expensive equipment and critical data. Physical access to that room bypasses most cyber security.
The layers of server room security
| Layer | What to do |
|---|---|
| Access | Biometric or card access on the door; a short list of named people; logs of every entry |
| Surveillance | CCTV covering the door and inside the room, recorded off-site or on a separate recorder |
| Racks | Lockable racks; cable management; equipment labelled |
| Fire | Smoke detection linked to the fire alarm; suitable suppression for IT rooms where required |
| Power | UPS sized for the load and runtime; generator or inverter support; surge protection |
| Environment | Dedicated cooling; temperature and humidity monitoring with alerts |
| Network | Firewalls and segmented networks, including a separate network for CCTV |
Common gaps in office server rooms
- The room doubles as a store, so many people have the key.
- No camera on the door, or the recorder sits inside the same room.
- Smoke detectors missing or not connected to the alarm panel.
- UPS batteries never tested.
- Air conditioning fails over a weekend with no alert.
- Racks unlocked and cabling untraceable.
Environment monitoring
- Temperature and humidity sensors with alerts to IT staff by SMS, email or app.
- Water-leak sensors under raised floors and near AC units.
- UPS monitoring with alerts on mains failure and low battery.
- Door-open alerts outside working hours.
- Smoke detection connected to the building fire alarm, and early-warning aspirating detection in critical rooms.
Who should have access
Server room access should be limited to named IT staff and approved vendors, with every entry logged. Vendors should be escorted or given time-limited access. Review the access list whenever staff leave or roles change. Two-factor access — such as face plus card — is worth considering for rooms holding critical systems.
Biometric access control →A checklist for SMEs
- Install access control on the server room door and restrict it to IT staff.
- Add a camera on the door and one inside the room.
- Connect smoke detection to the building fire alarm.
- Put critical equipment on a correctly sized UPS and test it.
- Add temperature alerts.
- Use lockable racks and tidy, labelled cabling.
- Review access lists whenever staff change.
Example: a small office server room
A 60-person software company in Koramangala kept its servers and network rack in a storeroom that also held printer paper and old laptops. The upgrade separated the room, fitted a face reader on the door with access for three IT staff, added a camera covering the door and the front of the rack, a temperature and water leak sensor with phone alerts, a smoke detector linked to the office fire alarm, and a UPS with runtime long enough for a clean shutdown. The paper and spare equipment moved out. Access logs and camera clips are now reviewed in the quarterly IT audit.
Security for IT parks and SEZ units →Quick answers
Does a small office need server room security?+
Yes. Even a single network rack holds equipment and data worth protecting; access control, a camera and smoke detection are inexpensive compared with the risk.
Should CCTV be recorded inside the server room?+
Cameras should cover the room, but the recorder is better kept elsewhere or backed up, so an intruder cannot remove the evidence.
What fire protection does a server room need?+
At minimum, smoke detection connected to the fire alarm. Larger or critical rooms may need specialised suppression; take advice for your site.
What temperature should a server room be kept at?+
Follow the equipment makers’ guidance; many rooms are kept cool and stable, and alerts should trigger well before equipment limits are reached.
Should the CCTV recorder be in the server room?+
It can be, provided it is in a locked rack and the room has access control. A second copy of key cameras elsewhere adds resilience.
Who should have access to the server room?+
Only the staff who need it for their work, usually IT, with every entry logged and reviewed.