Safety Norms: IT Service Management and Enterprise Operations

1Purpose, Scope, and Safety Principles

These norms set minimum expectations for protecting people, facilities, information, and service continuity in IT service management and enterprise operations. Service management covers how services are requested, changed, restored, and improved. Enterprise operations covers the daily running of servers, storage, networks, cloud platforms, data centers, and the business applications they support. Harm in this field can be physical, such as electrical shock or crushing injuries, or indirect, such as data exposure, failure of facility safety systems, or an outage that disables emergency notification.

The norms apply to service desk staff, incident and problem managers, change managers, system and network administrators, facilities technicians, cloud operators, contractors, and anyone holding privileged access. They are a foundation for locally approved procedures, not a replacement for them.

• Protect people first. When electrical, fire, or structural hazards are present, personal safety and site emergency arrangements take priority over service restoration.
• No production change is made without an authorized record, a documented rollback method, and a named responsible person.
• Access follows least privilege. Every account, key card, and tool grants only the access required for the assigned task.
• Uncertainty stops work. If a task is outside your authorization or training, stop, make the situation safe, and escalate.

2Roles, Competence, and Accountability

Accountability must be named for every service and every physical area. The service owner accepts residual risk for a service and approves its continuity arrangements. The change manager controls the change process and may refuse changes that lack evidence. The incident manager leads response during disruption. The facilities or site safety lead authorizes work on power, cooling, fire suppression, and access-controlled rooms. Information security and data protection contacts set handling rules for sensitive data.

Competence means demonstrated ability, not job title. Staff must complete the training required by local procedure and by equipment manufacturers, work under supervision until signed off, and keep records current. Certifications can support evidence of skill, but they do not by themselves authorize a person to isolate electrical supply or open energized equipment. Those tasks require written authorization from the site safety lead.

• Each service has a named owner, a named technical lead, and a documented escalation contact.
• Only personnel with written authorization may isolate power, open battery cabinets, work on generators, or handle fire suppression equipment.
• Contractors receive a site induction and are escorted in restricted areas unless formal access has been approved.
• Managers confirm competence before granting privileged access and review that access at intervals set by policy.

3Course-Specific Hazards and Risk Assessment

Typical activities include racking and cabling hardware, replacing drives and power supplies, patching operating systems, running maintenance windows, handling emergency changes, managing cloud configurations, responding to alerts, and maintaining configuration and asset records. Each activity introduces hazards that must be assessed before work begins.

Risk should be rated with the local likelihood and severity matrix. A five-by-five scale is common, but the approved organizational method governs. Assessments are recorded with the change or work request and reviewed when scope changes. A risk that cannot be reduced to an accepted level must be escalated to the named owner before work proceeds.

• High: work on energized power distribution, UPS battery strings, generator controls, or fire suppression systems. Requires isolation, a permit, and qualified personnel.
• High: production changes made during business hours without tested rollback, or bulk privileged changes across multiple environments.
• High: exposure of regulated or personal data through misdirected exports, unsecured backups, or copied credentials.
• Medium: lifting servers, network chassis, or battery modules. Use two people or mechanical aids where the manufacturer or site procedure specifies them.
• Medium: working in raised floor voids, overhead cable trays, or hot aisles, where trip, pinch, and heat hazards exist.
• Medium: lone work during overnight windows, where a medical or electrical incident may go unnoticed.
• Low to medium: prolonged screen work and repetitive keyboard use, which contribute to musculoskeletal strain and eye fatigue.
• Cyber threats such as phishing, credential theft, and ransomware are treated as safety-relevant because they can disable facility monitoring and emergency communication.

4Preventive Controls and Safe Work Practices

Change control is the primary preventive control. Every change must include the request, impact and risk assessment, approval by the designated authority, test evidence where practical, an implementation plan, a rollback plan, and verification steps after completion. Emergency changes may use an expedited approval route, but they still require a recorded rationale, a named approver, and a retrospective review within a period set by local policy.

Electrical and mechanical work requires isolation before hands-on contact. Qualified staff apply lock-out and tag-out to the specified energy source, verify zero energy with a serviceable meter, and record the permit. Interlocks, guards, and door sensors are never bypassed for convenience. Battery work is performed only by trained staff using insulated tools and manufacturer procedures.

• Do not implement a change whose rollback method has not been defined and, where feasible, tested.
• Schedule high-risk changes so the responsible engineer is rested and is not working alone.
• Stage deployments to a limited group before full rollout, and define stop criteria in advance.
• Verify backups and restore procedures before major changes. A backup that has never been restored is not evidence of recovery.
• Never work on energized equipment unless site procedure authorizes live work and the person is qualified for it.
• Lift heavy equipment using the method specified by the manufacturer or site, with two people where the procedure requires it.
• Report damaged floor tiles, cable routes, or rack doors the same shift.
• Check in and check out of data halls and plant rooms. Lone work in restricted areas requires a check-in arrangement agreed with the site.

5Equipment, Environment, Information, and Protective Safeguards

Protective equipment depends on the task. Safety footwear, eye protection, cut-resistant gloves, and hearing protection are required where the site risk assessment says so. Electrostatic discharge controls, such as wrist straps and grounded mats, should be used when handling bare circuit boards or drives, as directed by the manufacturer. Respiratory protection does not replace ventilation or hazard removal, and any use requires formal fit testing and training under local rules.

Environmental controls protect both equipment and people. Monitor temperature, humidity, power quality, and smoke or water detection, and route alarms to named recipients. Keep egress routes, extinguishers, and emergency shutoffs clear. Dispose of batteries, electronic waste, and toner through approved or licensed channels. Hazardous waste rules are jurisdiction-dependent and must be verified locally.

Information safeguards apply to every record and screen. Classify data, store production data only in approved systems, and encrypt sensitive data where supported. Never copy production data to personal storage. Do not place passwords, keys, or personal data in tickets, chat messages, or screenshots. Lock screens when leaving a workstation and control removable media. Privacy and data protection laws vary by jurisdiction and sector, so retention and transfer rules must be confirmed with the data protection officer or qualified counsel.

• Wear eye protection when cutting cable ties, working near battery terminals, or testing pressurized or fluid-filled components.
• Use insulated tools rated for the task, and inspect them before each use.
• Do not eat or drink in data halls or near active equipment.
• Sanitize or destroy storage media before equipment leaves the controlled environment, and retain the evidence.

6Incident Reporting, Emergency Response, and Escalation

Life safety comes first in every incident. If someone is injured, unconscious, or exposed to electrical, fire, gas, or chemical hazards, call the local emergency number used at the site. Make the area safe only if it is safe to do so, and do not attempt rescue beyond your training. Trained first aiders and site emergency teams take precedence. Evacuate when an alarm sounds or when instructed, and do not re-enter until the site authority confirms the area is safe.

Service and security incidents follow the escalation matrix. Record the incident, assign severity using the local scale, notify the incident manager and service owner, and inform the security team of suspected compromise. Preserve logs and evidence. Do not power off a suspected compromised system, or reverse a change, without approval unless immediate safety requires it. Near misses, such as a dropped rack component or a mis-scoped privileged command, are reported without blame so controls can improve.

• Report electrical smells, unusual heat, alarms, leaks, or smoke immediately to the site safety lead and emergency contacts.
• Report lost devices, suspected credential exposure, and misdirected data within the timeframe set by the security procedure.
• Declare a major incident when service, safety, or regulatory impact exceeds the thresholds in the local procedure.
• Keep an offline contact list and communications plan that works when primary systems are down.
• Rehearse emergency and recovery procedures at intervals set by policy, and record the results.

7Records, Training, and Documentation

Records prove that controls operate. Keep current configuration and asset records, change and release logs, permits to work, isolation records, inspection and test results, access reviews, training sign-offs, and disposal certificates. Records must be accurate, timely, and retained for the period set by policy and applicable law. Correct errors by annotation, not by overwriting history.

Training must be refreshed when procedures, equipment, or risks change, and after any incident that reveals a gap. Use practical exercises such as simulated failover, tabletop incident response, and supervised isolation drills conducted by qualified staff.

• Each physical work activity has a permit or documented authorization recorded before work starts.
• Training covers site induction, service-specific procedures, relevant manufacturer instructions, and security awareness.
• Contractor competence and insurance evidence are verified before access is granted, as local procedure requires.
• Asset disposal records include data sanitization evidence and the destination of the equipment.

8Monitoring, Review, and Continuous Improvement

Monitor how well these norms work. Track failed or emergency changes, incidents linked to human error, near-miss reports, overdue inspections, excessive privileged access, environmental alarms, and training completion. Indicators should guide improvement rather than punish reporters. Review results at a regular management forum and assign actions with named owners and clear completion conditions.

These norms are a practical base, not a finished safety program. Before adoption, confirm applicable laws, standards, insurance requirements, and manufacturer instructions with competent authorities and qualified professionals, because they vary by jurisdiction and change over time. Align local procedures with them, train staff, and test them. This educational guidance does not replace formal professional authorization, supervised training, approved procedures, or the advice of emergency services.

• Conduct post-incident reviews that identify contributing factors and control gaps, not individual blame alone.
• Audit privileged access and change records against these norms at intervals defined by the service owner.
• Review risk assessments whenever a service, facility, or threat changes significantly.

Implementation checklist

• Confirm the service owner, change manager, and site safety lead for each service and physical area.
• Verify that every production change has an approved record, impact assessment, and tested rollback plan.
• Check that electrical, battery, generator, and fire suppression work has written authorization and isolation.
• Confirm privileged accounts use multi-factor authentication and are reviewed at the set interval.
• Ensure no production data, passwords, or keys are stored in tickets, chat, or personal devices.
• Test that environmental alarms reach named responders and that emergency contacts are current.
• Confirm staff know the local emergency number, evacuation route, and how to report a near miss.
• Verify contractors are inducted and escorted before entering restricted areas.
• Review that batteries, electronic waste, and data-bearing equipment leave through approved channels.
• Schedule a review of incidents and near misses and record actions with named owners.