Praelor / Environments / Critical Digital Infrastructure Campus · Data hall · Plant
Critical Digital Infrastructure

Data center campus.
One site, six domains.

A campus is a power plant, a cooling plant, a secure facility, a production network and a written promise to customers at the same time. Physical, cyber, environmental, contractor and grid risk all act on the same halls, and each one is watched by a different team on a different console.

The plant, the badge reader and the network each report correctly. The pattern that matters only exists across them, and across them is where no one is standing watch.

Three teams saw it.
The campus did not.

One night shift at a colocation campus. Every system does exactly what it was bought to do, and every operator follows the procedure correctly.

Cyber / OT · 02:05

Repeated failed authentication against a chiller plant controller from an integrator account.

The shift engineer files it against the open change record.

Filed to change
Supply chain · 03:40

An out-of-hours remote hands ticket names an escort for a contractor added to the vendor list that week.

The service desk confirms the customer signed it and books the escort.

Escort booked
Physical · 04:15

A badge opens a mantrap on a hall the holder has never entered, then a door on the far side of it.

Access control grants both and security notes the anomaly for the morning report.

Logged for review

Three teams, three queues, three correct procedures. The building management authentication log, the ticketing system and the access control record do not talk to each other, and nothing on the campus is responsible for the line that runs through all three. By the morning report the three items are read out separately, if they are read out at all. The pattern was never the problem. Ownership of the pattern was.

With AETHOS

One decision on the hall and the plant behind it, in front of the site security lead, while the escort is still on site.

AssetThe chiller plant serving that hall and the cage inside it, not three unrelated entries
OwnerA named person with the authority to suspend escorted access and hold the change
ClockRunning from 02:05, not from the morning report
CausesThree contributors, counted once, independence asserted by a person
EvidenceEach signal still attached to the system it came from
CoverageStated on the object, including what is not connected
A single-tenant hall and a multi-tenant campus differ in who signs, not in structure
Walk through your campus →
02
What converges here

Six domains,
named in campus terms.

The same six domains resolve onto every estate. This is what they are when the estate is a data center campus.

Cyber / OT

The network and the plant that keeps it cold

Production, customer and out-of-band networks, alongside the building management and infrastructure management systems and the controllers under chillers, air handling, switchgear, UPS and generators. A plant alarm and a network alert are the same story more often than either console can tell.

Physical

Fence, lobby, mantrap and hall

Perimeter detection and cameras, lobby and visitor processing, mantrap and turnstile records, cage and cabinet access, and the badge record that says who was in which hall and when.

Airspace

Small UAS over the roof and the yard

A track over the cooling plant, the generator yard or the fiber entry is a survey rather than a nuisance. Detection is the straightforward part. Deciding what the track means next to a badge event or an open maintenance window is not.

Supply chain

Vendors, remote hands and hardware

Escorted contractors, integrator remote sessions, inbound equipment and spares, and the firmware that arrives inside them. Access and supply are the same exposure viewed from two directions.

Environmental

Power, cooling and the weather that moves both

Utility and grid conditions, fuel held on site, heat and humidity in the hall, and storms or flooding on the roads that carry fuel and staff. That is one event acting on availability, not several unrelated tickets.

Geopolitical

Jurisdiction, customers and the wider picture

Where the campus sits, who its tenants are, the regime it reports incidents under, and the reporting that changes what a routine indicator means for one customer and not for another.

03
Who decides

The decision goes to the
altitude that holds the authority.

The same event matters differently on the floor, at the security desk and in front of a customer. One object, delivered at each altitude, with the clock that altitude actually runs on.

Shift engineer

What changed in the power and cooling chain and on the floor in the last hour, and what to watch for the rest of this shift.

Minutes
Site security lead

The ranked picture across domains, the converging set behind each item, and the option set with an owner attached, including who can stop an escorted visit.

Minutes to hours
Site director

What is being worked, what posture is recommended and why, and what the recommendation rests on if a customer or a regulator asks later.

Hours
Portfolio and customer-facing executive

Comparable exposure across sites, ranked by policy that was ratified rather than inferred by a vendor, in terms a customer commitment can be answered in.

Daily and by exception
04
What it takes

A partially instrumented campus
is the normal case.

Nothing here assumes a complete estate or a rip and replace. Sources are added as adapters against a common contract, and the score states the coverage it was computed on.

  • Access control and alarms badge, mantrap, cage and cabinet records, intrusion detection, cameras
  • Plant and environment building and infrastructure management, cooling, power chain, generator and UPS status
  • Networks and controls security monitoring, plus OPC UA, Modbus and DNP3 where plant controllers expose them
  • Change and service change records, remote hands tickets, escorted visit logs and the vendor list behind them
  • Counter-UAS and airspace RF, radar, acoustic and camera detections, plus Remote ID where it is broadcast
  • Utility and weather grid conditions and outage notices, fuel on site, forecast and storm warnings

Onboarding is four things, in order.

Build the asset model for the campus, so a signal has something to attach to: halls, cages, cooling loops, the power chain and the systems behind them. Connect what exists and state what does not. Ratify the policy: the weights, thresholds and windows that decide what outranks what, signed by a named person rather than shipped as a default. Then run it against real traffic and compare the queue to the judgment of the people who already do this work.

Where a feed does not exist, coverage is disclosed on the object instead of the gap being quietly absorbed into a number.

In the first meeting

We walk one real convergence case from your campus, and we name what is built, what is specified, and what is neither.

Request a briefing →