Microsoft senior director and security architect Jim Black, who oversees security strategies for Microsoft’s data centers, will chair the new board. With over 20 years of involvement in SIA initiatives, Black has contributed to the development of design standards, access control, and certification standards.
“The incredible, exponential scaling and explosion of this rocket ship that is the data center industry over the last couple of years, driven by some of the more newsworthy events around AI and some of the massive investments that are being made, has just raised the visibility externally to the rest of the world,” Black told DCN.
“This is no longer a niche subset and is really transitioning to a defined critical infrastructure. You can’t copy and paste what you might do for other critical infrastructures and have it work for the data center ecosystem.”
The SIA data center advisory board has established five primary goals that form its operational framework. (Image: Alamy)
Why This Data Center Advisory Board Matters Now
Data centers have existed since the beginning of the computing era, and security concerns have accompanied them since the first facilities were built.
However, the AI-driven infrastructure boom has elevated data centers from a niche technology sector to a recognized form of critical infrastructure. This visibility has attracted attention from regulators, legislators and the broader public in ways the industry has not previously experienced.
The scale, scope, and speed of current data center operations have accelerated beyond historical norms.
“People are going so much faster than they’ve ever gone before in building it, making it happen, deploying it,” Black said. “It’s going faster and faster and faster, and that means less time to iron out these issues.”
He added: “When you have commercial agreements that are negotiated and signed on a weekend or done very quickly, this is where the risks associated with those gaps in understanding just get amplified.”
The compliance landscape has also transformed from relatively straightforward ISO 27001 and SOC 2 frameworks into what Black describes as exponentially expanding complexity.
“There’s a blizzard of frameworks, laws, regulations, standards and compliance obligations that data center providers have to their customers,” Black said. “If you’re a hyperscaler, you’ve got to serve all of your customers, and in some cases you have hundreds or thousands of customers in hundreds of industries in dozens of countries, all of which have different types and requirements.”
Hyperscale operators must navigate state-by-state, country-by-country and even county-by-county regulatory variations with highly prescriptive compliance requirements.
“SIA is keeping abreast of all of the regulations and the proposed legislation that’s coming up, state by state, country by country, county by county, city by city in some cases,” Black said. “That engagement is more important than ever to help the industry deal with just this tsunami that is inbound on the compliance front.”
Five Strategic Objectives
The SIA Data Center Advisory Board has established five primary goals that form its operational framework:
-
Uplevel and modernize security best practices
The board will develop integrated approaches that address the unique requirements of modern data center infrastructure across all security domains. “We want to uplevel and modernize security best practices that converge the physical, the cyber, the operational technology, and the operational security challenges that are inherent to our ecosystem,” Black said. -
Facilitate industry collaboration
The SIA’s 1,600-member cross section will connect operators, security practitioners, solution providers and integrators in ways that go beyond traditional vendor-customer relationships. “It’s not just manufacturers trying to sell stuff to the operators, and it’s not just the solution providers cold calling, and it’s not just the providers going to a trade show and walking down the aisles,” Black said. “We’re creating a place or a framework for industry collaboration to formalize those partnerships and reduce fragmentation across the sector.” -
Support legislative and regulatory engagement
The board will provide subject matter expertise to inform policy development as regulations affecting data centers continue to evolve across AI, biometrics, and other areas. “SIA has a long and good history of active engagement in government relations and being able to help craft, modify, and adjust legislation as it’s being developed to reflect the interests and the needs of their membership, and in our case, the industry,” Black said. -
Provide expert guidance to SIA leadership
The board will advise on the evolution of data center technology industry trends to enable better-informed decisions at the organizational level. -