CNI Checklist #1: Connected Devices in Data Centres

Now that data centres are categorised as Critical National Infrastructure (CNI), every connected device from cameras, access control to sensors and critical systems like ventilation and cooling, becomes part of the critical infrastructure.  

They are not isolated physical endpoints, but part of a complex connected network that play a part in resilience and compliance. And that resilience does not stop with the network, it extends into Operational Technology (OT) and to the supply chain. 

An example is the Atlanta data centre attack, where hackers disabled air cooling via the building management system. Servers overheated and failed, leading to emergency shutdowns. The target wasn’t data; it was the environment protecting it. Showing how connected physical systems are now cyber-physical vulnerabilities. 

IT/OT convergence: new opportunities, new risks 

The rapid convergence of IT and OT has transformed how these environments operate. Intelligent systems and connected devices have unlocked new efficiencies, features and visibility, but they’ve also expanded the potential attack surface. Traditional perimeter defences alone can’t manage the complexity of modern, connected data centres. 

At the same time, supply chain resilience is emerging as a critical factor in operational security. In fact, over one-third of all cyber breaches now originate from third-party vendors, as attackers exploit the interconnected nature of modern supply networks and lead to hundreds of millions in losses and exposed data. In several cases this year, attackers gained access to critical systems by compromising third-party software integrations. 

Building cyber resilience 

To begin your journey toward improved cyber resilience and compliance, you must know what’s connected, trust how it’s connected, and protect it at every layer including the suppliers and systems that support it. In this checklist, we bring together Zero Trust Security, OT/IT segmentation and controls, and supply chain visibility as important tools to limit the impact of a potential compromise and maintain operational security.  

Here’s our monthly Data Centre CNI Checklist:

Protecting critical data and systems starts with securing every device, and every connection. Because when every device is visible, verified, and protected, cyber resilience becomes built-in. 

Over the coming weeks, we’ll dive deeper into each checklist point, from Zero Trust and OT/IT segmentation to supply chain visibility, giving you practical insights to strengthen your data centre’s resilience. Read the latest checklist blog:

• Identify and Assess Every Connected Device

Set up an appointment with a member of our team to understand how North can support you on your CNI journey.