Maintenance Technology September 2016 - 70

9 Implementation RCM is the leading methodology in many industries for failure mitigation, the training techniques, and support services borne from years of development in the airline industry. The data center IT and supporting infrastructure of mechanical, electrical and fire protection systems are poised to realize significant benefits from implementation of RCM. If the RCM process is correctly applied, it makes the following contributions to the performance of the organization: * Greater safety and environmental integrity * Improved operating performance (uptime, output, product quality and customer service) * Greater maintenance cost-effectiveness * Greater motivation of individuals * Better teamwork * A comprehensive database (long term asset life cycle management & financial savings). How does RCM benefit a data center's IT and MEP infrastructure? A trained and certified RCM facilitator/practitioner leads a team of sitespecific operations and maintenance personnel and external subject matter experts to assess an asset's functions and associated performance standards. The first requirement of the RCM process is to establish the operating context for the system, which should include the business case for the pilot analysis, the overall mission statement of the entire organization, and must include a plant level, machine level and analysis level outline. The team then identifies functional failures, failure modes and failure consequences, and finally is led through a decision process for identifying proactive tasks or default actions to reduce or eliminate failure consequences. The RCM methodology is used to determine the maintenance requirements of any physical asset, system or process in its current operating context to ensure it continues to do whatever its users want it to do. And, when that operating context changes, the system is reevaluated to determine if it can support the new parameters, resulting in revised operating and maintenance requirements, hiring/(re)training personnel or results in a functional/physical design changes. HIPAA - EDI, security & confidentiality in health care industry. SSAE16 - Controls for data processing of client information. FDA Part II - Medical industry controls for processing data. EU Annex 11 - European equivalent to FDA Part II. Gramm-Leach Bliley Act - Provisions to protect consumer financial information. OCC-Sound Practices to Strengthen the Resilience of the US Financial System - Post 911 business continuity objectives. Basel II Capital Accord - Banking business continuity & disaster recovery planning & loss limits. Health Information Technology for Economic and Clinical Health Act - HHS standard for IT protections of health information. Expedited Funds Availability Act - Business continuity planning standard for commercial banks. Financial Industry Regulatory Authority Rule 4370 - Requires firm to create & maintain business continuity plan. Business Continuity Institute (BCI) - Established BC standards worldwide. ISO 22301 (2012) - Advisory for document management systems & disruption mitigation. PCI DSS - Standard for paymentaccount data security. EU Data Protection Directive - Standards of data protection for EU citizens. Canada's Personal Information Protection & Electronic Data Act - Personal information data protection in commercial business. Federal Information Security Management Act Framework to protect government information. See NIST 800-34, Rev-1. Federal Energy Regulatory Commission - Standard for recovery planning of utilities. Securities and Exchange Commission Rules 17a-3 & 17a-4 - Standard for data availability. ASIS International - Establishes standards for data protection. ISO 27031 (2011) - Established principles for information and communication technology (ICT) readiness for business continuity. WWW.SMRP.ORG 10127-4056 SMRP Solutions SE.indd 9 8/22/16 9:43 AM http://WWW.SMRP.ORG

Table of Contents for the Digital Edition of Maintenance Technology September 2016