access rights; (b) the allocation and use of privileged access rights should be restricted and controlled; (c) the allocation of passwords should be controlled through a formal management process; (d

systems for data center such as CCTV, fire alarm systems, fire extinguisher or automatic fire suppressing system, uninterrupted power supply, temperature and humidity control systems as well as maintain