0800 033 6633 (UK) 
1280 147 515 (AU)
Secondary Data Centre - Electrical security
The building is electrically fed from an external source by two number four core 300mm 2 Cross Linked Polyethylene/ Steel Wire Armoured /PVC cables. The ampere rating of these cables is 469 Amps each. These are connected, in parallel, into the stand-by generator by-pass switch panel. From the by-pass switch there are two number four core 240mm 2 Cross Linked Polyethylene/Steel Wire Armoured/PVC cables supplying the main switch panel and connected in parallel. Each cable is rated at 409 Amps. Cables are run in ducts and on cable tray.
Distribution
From the main switch panel there are nine sub-circuits supplying sub distribution boards at various locations within the complex.
Emergency power station
In the event of a power failure the diesel generator will start within 20 seconds and take the electrical load. The diesel generator is rated at 650kVA (520kW) and is fuelled from a 1,700 litre daily use tank which is automatically replenished from a 25,000 litre bulk storage tank, at full load this should enable the set to run for in excess of 40 days. Upon restoration of supplies the set will automatically switch back to the mains supply with only a split second interruption to supplies. Any interruption of supplies will not affect equipment due to the use of UPS systems.
Electro Magnetic Pulse Protection
When detonated a nuclear weapon generates an electromagnetic pulse (EMP). An EMP is an electromagnetic field that changes in intensity at up to 50kV per nanosecond, and can induce high-energy pulses in any conductor subjected to this changing field strength. Although the high-energy pulse is short, the energy to be dissipated is sufficient to destroy unprotected communications and other electronic equipment. It is possible for a single explosion to induce damaging effects over an area of thousands of square miles in diameter.
The bunker in Berkshire has areas with a unique infrastructure to protect against these effects. Shielding by means of a continuously welded 3mm thick, steel shield of all technical equipment areas. All conductors entering this shield do so via a penetration plate and vault and have VDRs and RFI filters incorporated.
The EMP protection also serves to protect client equipment from mains data sniffing, which is a potential risk on unfiltered mains supplies.
Tempest protection
It is possible for all electronic circuits to generate an electrical disturbance, signal or noise. This may be transmitted by radiation (through the air) or along conductors, cables pipes etc. This noise is known as Radio Frequency Interference (RFI). Generally RFI is only of 
nuisance value to other electronic equipment nearby. In the case of data processing and communications equipment the consequences could be more serious. It is possible for RFI to be generated by equipment, which can be detected and interpreted using sensitive espionage devices at great distance from the equipment producing such interference.
TEMPEST is a protection measure that prevents electronic eavesdropping by containing all emanations to the locality of the equipment generating them. It consists of a screened enclosure to contain the radiated RFI by reflection or absorption. Supplies and services both mechanical and electrical are treated to prevent the conduction passage of RFI through the screen. Certain parts of the bunker are within a Tempest Screen and are therefore protected from this electronic eavesdropping.
Environmental controls
The environment within the Bunker is an electrical system with electrically operated valves and dampers. There is no central microprocessor but a set of individual controllers, which enable environmental conditions to be altered to suit individual room requirements.
Mechanical services
Fresh, filtered air Filtered at 98% nominal efficiency is introduced to the bunker via fresh air intake fans, a percentage of this air is introduced into the return (recirculating) air from the rooms. The air then passes through an Air Handling Unit where it is conditioned for temperature and humidity before passing to the rooms. There are two main AHU's with duplicated fans (duty and standby), one which supplies the North side of the building and one supplying the South side. There is the ability, to supply the air via activated charcoal gas filters, which could remove gasses, biological agents or radioactive material if required.
Chillers
There are three refrigerated water chillers, each capable of producing 150kW of cooling, giving an installed cooling capacity of 450kW. Pipes distribute the chilled water to the AHU's via the chilled water pumps. The chillers are themselves cooled by 16 fresh air supply and exhaust fans which bring ambient air into the bunker from outside of the complex. Extra cooling can be added at any time as there is ample surplus power and space to achieve this.
System health monitoring - daily - periodic
All FreeBSD/OpenBSD/NetBSD managed systems have periodic reporting enabled, which is processed by an in house system called Automail. Automail passes reports using templates, which tell it whether the reports data fall within expected parameters. Any reports that fall outside expected ranges are then forwarded to the system administration staff. A dedicated system administrator is assigned to check each of these reports on a daily basis and investigate any abnormalities. The content of automail reports ranges from standard system information such as disk and CPU load to security information and other system messages. For example, automail would notify if applications failed unexpectedly and if there was any unauthorised access.
As each new system is unique, Automail forces our Systems Administration team to acknowledge the required reporting parameters for each individual system, before report filtering will initiate.
Change management and updates
All changes to client systems are managed through a formal change control process, which includes the use of code repositories and development servers. A change management process will be proposed for back-to-back integration with the client's own internal controls.
Software installation and administration
ALD will install, update and administer all operating systems and database software on the server machines under the scope of managed services products.
Security patches
Where either the client or ALD has identified a security risk, then we will work with the client to assess the risk to all systems, and recommend a course of action. ALD does not proactively monitor or upgrade all client applications to the latest service packs automatically. However, if specifically asked for, under the terms of our managed service levels, then we will review and make recommendations on which service packs should be applied. The application of service packs will always be at the client's instruction, and then only after careful consultation, to ensure that sufficient understanding of any possible consequences has been reached.
