| Facility resilience | Assess how the facility handles power, cooling, and other critical-system failures. The cited statistic reports that 54% of significant outages cost more than $100,000. | Request documented redundancy designs, maintenance procedures, and incident summaries. “N+1” means one additional component beyond the capacity required; “2N” describes two independent systems, each designed to support the required load. | Look for evidence that redundancy covers the full power or cooling path—not just individual components—and ask how failover is tested. |
| Power continuity | Check the design for utility feeds, UPS systems, generators, fuel arrangements, and distribution to the server rack. | Ask for the documented power topology, maintenance records, test frequency, and the specific components covered by any redundancy claim. | Confirm that the stated design applies to the actual server location and that planned maintenance does not remove a critical layer of protection. |
| Cooling capacity | Verify that cooling capacity suits the server’s expected power draw and operating requirements. | Request the supported rack power range, temperature-monitoring approach, and cooling-failure response procedure. | Match the proposed configuration to your expected workload and confirm how capacity can be increased if your needs change. |
| Network resilience | Determine whether connectivity has physically diverse paths and whether routing can continue after a link or upstream-provider failure. | Request a network diagram, details of path diversity, routing and failover procedures, and measured latency to your key user regions. | Do not treat multiple provider names as proof of diversity; ask whether routes share conduits, building entrances, or other single points of failure. |
| Availability commitment | Read the service-level agreement (SLA) for its measurement period, covered services, exclusions, claim process, and remedies. | For context, 99.99% availability corresponds to about 52.6 minutes of downtime in a 365-day year before considering SLA exclusions or measurement rules. | Compare the contract definition—not only the headline percentage—and check whether credits adequately address your business risk. |
| Backups and recovery | Establish who operates backups and how data is restored after deletion, corruption, or infrastructure failure. | Set a recovery point objective (RPO), the maximum acceptable data-loss interval, and a recovery time objective (RTO), the target time to restore service. Request restore-test results. | Confirm backup frequency, retention, isolation from production systems, restoration responsibilities, and any additional fees. |
| Security and access | Review controls for physical entry, administrator access, change management, and security incident notification. | Ask for current, independently assessed control documentation where available, including its scope, coverage period, and any exceptions. | Check that the evidence covers the relevant facility and managed services; an audit report does not by itself guarantee security. |
| Managed support | Clarify which tasks are included, such as hardware replacement, operating-system support, monitoring, and incident escalation. | Review support hours, severity definitions, response-time commitments, escalation contacts, and responsibility boundaries. | Choose coverage that matches your operating hours and technical capabilities; distinguish response time from time to resolution. |
| Capacity and contract fit | Check hardware availability, upgrade options, bandwidth and storage limits, contract duration, and exit procedures. | Request a written configuration, recurring and one-time charges, upgrade lead times, renewal terms, and data-export or migration requirements. | Select a configuration with enough headroom for forecast growth, while confirming that upgrades and termination terms are clear and practical. |