GIT-P-C002 机房管理政策

来源：GIT-P-C002 Server Room Policy.pdf OCR日期：2026-06-12 16:57

第 1 页

Sinarmas agribusiness and food Policy No。 GIT-P CO02 Group TT Polcy & Governance Group Controller Date Issued 31s1 Jan 2021 SERVER ROOM POLICY Effective Date 31st Jan 2021 Classification Revision No。 2 Page 1of 12 GITPC002 SERVER ROOM POLICY REVISION HISTORY DATE REVISION CONTENTS RATIONALE APPROVED 8Y New Policy Release: SMD Operations; MD Finance IC 002 Area MD Service & Projects, MD Server Strategic, MD Downstream 1st January 2009 Renamed to Serer Room Policy GIT P.C0o2 Revisedl expanded Definitions and Guidelines Incorporated contents from the following IT Procedures: Data Center Access Procedure IT-PO-005 b Data Center Location Determination, Security and Maintenance ITPO 017 To align with the neW Group |T organizational structure and rolesl responsibilities 15th December 2020 Group Controllership and Compliance; Chief Information Officer To provide a Clearer understanding and Group Controllership and to prevent Compliance; Chief Information ambiguity Officer regarding Server Room 31st January 2021 More detail in definition of Server Room POLICY & STANDARD PROCEDURE 2021

第 2 页

Sinarmas agribusiness and food Policy No。 GIT P CO02 Group TT Policy & Governance Group Controller Date Issued 31st Jan 2021 SERVER ROOM POLICY Effective Date 31st Jan 2021 Classification 仃 Revision No。 2 Page 2 of 12 APPROVALS Digitally signed Pedy by Pedy Harianto Date: 2021.01.20 Harianto 14:40:18+07'00' Kok Digitally signed by Kok Yeow Date: 2021.01.19 Yeow 11:50:30+07'00' Pedy Hariante Group Controllership and Compliance Khoo Kk Yeow Chief Information Officer DOCUMENT CONTROL Olynrdb A; In Dicnstang Alex Wong egneomiex Wongkxlnwml Ote 232101,16164109+070 PROCESS OWNER Group IT Infrastructure Digitally signed by Wong Hong Zhou Date: 2021.012013.58.01 +0700 Wong Hong Zhou REVIEWED BY Group Controller DOCUMENT OWNER Group IT Policy and Governance

第 3 页

Sinarmas agribusiness and food Policy No。 GIT-P COO2 Group IT Policy & Governance Date Issued 31st Jan 2021 SERVER ROOM POLICY Group Controller Effective Date 31st Jan 2021 Classification I Revision No 2 Page 3 Of 12 TABLE OF CONTENTS PURPOSE SCOPE DEFINITION GUIDELINES 5 APPENDIX REFERENCE 12 12

第 4 页

Sinarmas agribusiness and food Policy No。 GIT P C002 Group TT Policy & Governance Group Controller Date Issued 31st Jan 2021 SERVER ROOM POLICY Effective Date 31s1 Jan 2021 Classification I Revision No。 2 Page 4of 12 PURPOSE To define the minimum standards and requirements for a serer room Of the Company; including physical and non- physical security; access controls; and maintenance Of the SerVer room and all equipment within i。 TUJUAN Untuk menetapkan standar dan persyaratan minimum untuk ruang Serer Perusahaan termasuk keamanan fisik dan non-fisik; kontrol akses; dan pemeliharaan ruang Serer dan Semua peralatan di dalamnya。 SCOPE AlI Server rooms belonging to, Or used by Sinar Mas Agribusiness and Food, in all countries where Sinarmas Group IT ("Group IT") operates。 RUANG LINGKUP Semua ruang Serer adalah milik, ataU digunakan oleh Sinar Mas Agribusiness and Food; di semua negara di mana Sinarmas Group IT ("Group |T") beroperasi. DEFINITION DEFINISI 1. Server is 3 computer program Or a device that provides functionality to other computers on its network; such a5 storing; retrieving; and sending Or "serving" files and data。 Example Of server: SAP server; Email serer 1 Serer adalah suatu program komputer atau suatu peralatan yang menyediakan fungsi untuk komputer lainnya dalam jaringan; seperti menyimpan; mengambil, dan mengirim ataU "memberikan pelayanan' file dan data Contoh server: Server SAP; ServerEmail。 2 Server room is any room that houses at least One (1) full rack Of equipment containing either servers Or manageable network equipment Rooms with just switches Or 1-2 servers are not classified as Serer rooms 2 Ruang server adalah semua ruangan yang memiliki setidaknya 1 (satu) rak peralatan yang berisi server atau peralatan jaringan yang dapat dikelola. Ruangan berisi switch ataU 1-2 Server tidak diklasiifikasikan sebagai ruang server。 3. Network is a group of tWO (2) Or more computer systems linked together in order t0 Share resources, exchange files; or allow electronic communications_ Example Of network equipment are routers, switches; firewalls。 3. Jaringan adalah kumpulan dua (2) atau lebih sistem komputer yang saling terhubung untuk berbagi sumber; bertukar file; ataU memungkinkan terjadinya Komunikasi elektronik。 Contoh peralatan jaringan adalah router, switch, firewall。 4 Relevant Group I refers to internal employee in Group I responsible to 4 Group IT terkait adalah karyawan internal dalam Group IT yang bertanggung jawab

第 5 页

Snarmas agribusiness and food Poliay No. GIT P C002 Group TT Policy & Governance Group Controller Date Issued 31st Jan 2021 SERVER ROOM POLICY Effective Date 31s1 Jan 2021 Classification Revision No。 2 Page 5of 12 hislher scope of work, ie。 Infrastructure; Applications, or Digital atas ruang lingkup pekerjaannya yaitu: Infrastruktur, Aplikasi, atau Digital。 5 Head of IT Infrastructure refers to the |T Infrastructure Lead Or I Manager in each Of the respective locations where the Company operates. For example; the Head of IT Infrastructure in Indonesia Will be responsible for all the server rooms in Indonesia; While the Head Of | Infrastructure in China or Singapore are responsible for their respective country SerVer room 5 Head of |T Infrastructure mengacu pada Pimpinan Infrastruktur I atau Manajer IT di masing-masing lokasi di mana Perusahaan beroperasi。 Sebagai contoh; Head of IT Infrastructure di Indonesia akan bertanggung jawab untuk Semua ruang server di Indonesia, sedangkan Head of IT Infrastructure di Cina ataU Singapura bertanggung jawab atas ruang serer di negara mereka Namun; itU juga merupakan tanggung jawab pimpinan masing-masing di Perkebunan dan Perwakilan Untuk keamanan fisik dan kepatuhan terhadap kebijakan ini. Tim |T tidak menjaga dalam cakupan lokasi ini。 However; t is also the res ponsibility of the respective General Managers in the Estates and Regional Offices fOr the physical security and adherence to this policy. The IT team does not maintain presence at these locations. GUIDELINES 1 A Server Room must meet the minimum criteria set by Group |T as fOllows KEBIJAKAN Ruang SerVer wajib memenuhi kriteria minimal yang ditentukan oleh Group IT; sebagai berikut: A. Spasial a. Harus merupakan area tertutup terpencil dengan peredam SUara dan SeCara fisik terlindung dari pemaksaan masuk danlatau kondisi CUaCa eksternal Mereka harus ditempatkan di area yang aman didalam bangunan dan tidak mudah dipengaruhi oleh keadaan yang tidak terduga atau force majeure (seperti: banjir, gempa bumi, kebakaran; terpapar Sinar matahari langsung) bencana teknis (seperti: listrik padam atau tegangan tidak stabil) dan kejadian yang disengaja (seperti: pencurian atau sabotase): A. Spatial a. Must be a secluded enclosed area With soundproofing, and physically protected from forced entry andlor external weather conditions。 They Should be located in Safe area inside 3 building and not easily influenced by any unforeseen Circumstances Or force majeure (such 35 flood; earthquake; fire; exposure tO direct sunlight); technical disaster (such as power outages Or unstable voltage) and deliberate acts (such 35 theft Or sabotage) b. Whenever possible; the Serer b. Bilamana mungkin; ruang Server

第 6 页

Sinarmas agribusiness and food Policy No。 GIT P C002 Group TT Policy & Governance Group Controller Date Issued 31st Jan 2021 SERVER ROOM POLICY Effective Date 31st Jan 2021 Classification Page Revision No。 2 6 of 12 Room should be located in safe distance from area that may pose a reasonable threat (i.e chemical factory or power plant)。 harus berada pada jarak yang aman dari area yang dapat menimbulkan ancaman (seperti: pabrik kimia atau pembangkit listrik). C Serer Room is accessible by emergency personnel such 35 firefighters; police Or medical staff C Ruang Serer dapat diakses Oleh personel darurat seperti petugas pemadam kebakaran; polisi ataU petugas medis。 9 The Serer Room's location should be positioned away from areas of high people traffic; with its entrance aCCeSS designed Or positioned in 3 Way tO prevent examination Or aCCeSS by curious and unauthorized parties。 d. Lokasi ruang server harus jauh dari area orang yang sering berlalu lintas; dengan akses masuk dirancang sedemikian rUpa untuk mencegah pemeriksaan atau akses oleh pihak yang tidak berwenang. Examples of unsuitable areas are basements that are prone tO flooding, kitchen areas; Or building lobbies。 Contoh area yang tidak aman seperti ruang bawah tanah yang rentan terhadap banjir, area dapur ataU lobby bangunan。 B. Equipment B.Peralatan a All walls and doors of the Server Room must be fire rated to withstand a fire for at least one (1) hour。 a. Seluruh dinding dan pintu dari ruang Serer harus tahan api untuk bertahan dari kebakaran setidaknya selama 1 (satu) jam b The Server Rooms should he equipped with fire fighting equipment such 35 handheld fire extinguishers; fire suppression systems and smoke detectors。 b. Ruang Serer harus dilengkapi dengan perlengkapan pemadam kebakaran; seperti handheld fire extinguishers; fire suppression systems dan smoke detectors。 The fire fighting equipment Used for Serer Rooms should be safe fOr servers; like inert gas system e.9 Halon system Or FM2O0 system。 Water-based fire fighting equipment should not be Used; sUch 35 ceiling mounted water extinguishers that must be deactivated. Perlengkapan pemadam Kebakaran yang digunakan untuk ruang SerVer harus aman Untuk Serer seperti sistem gas inert; contoh Sistem Halon atau sistem FM2O0 Perlengkapan pemadam kebakaran berbasis air tidak boleh digunakan seperti alat pemadam air yang dipasang dilangit langit harus dinonaktifkan

第 7 页

Sinarmas agribusiness and food Policy No。 GIT-P CO02 Group IT Policy & Governance Group Controller Date Issued 31st Jan 2021 SERVER ROOM POLICY Effective Date 31st Jan 2021 Classification Revision No. 2 Page 7 of 12 C Cooling Specifications C. Spesifikasi Pendinginan a. The room's temperature must be stable between 23 27 9C and controllable: a Temperatur ruangan harus selalu stabil diantara 23 27 %C dan dapat dikontrol b. Server Rooms with more than twWo (2) racks Of equipment; Or any Server Room designated as critical (such as production server) should be installed with an Environmental Monitoring System ("EMS") which tracks the temperature humidity Of the room。 The EMS should be connected tO the Network Operation Center ("NOC") fOr monitoring remotely b. Ruang server dengan lebih dari dua (2) rak peralatan; atau ruang server yang dirancang sebagai ruang kritis harus dipasang Sistem Pemantauan Lingkungan ("EMS'-Environmental Monitoring System) yang berfungsi untuk memantaU suhulkelembaban ruangan。 EMS harus terhubung Ke Network Operation Center ("NOC") untuk memantau dari jarak jauh。 D.Electrical Specifications D. Spesifikasi Listrik a Server Rooms must be provided with electrical power from electricity distributor for 24 hours; SeVen (7) days 3 Week。 Server Rooms should not be located in areas prone to frequent power outages both scheduled and unscheduled. 3 Ruang Serer harus dilengkapi dengan daya listrik dari distributor listrik selama 24 jam, tujuh (7) hari seminggu. Ruang server tidak boleh terletak di area yang sering mengalami pemadaman listrik baik yang dijadwalkan maupun yang tidak dijadwalkan。 Additionally, they must be equipped With backup POWer Via Uninterruptable Power Supply ("UPS") units and generator sets。 The capacity Of the UPS must be sufficient to allow the proper shutdown of all equipment in the Server Room or until the generator Kicks in. Selain itll harus dilengkapi pula dengan cadangan listrik melalui Uninterruptable Power Supply ("UPS") dan generator set (genset)。 Kapasitas dari UPS harus memadai untuk mendukung pemadaman dari Semua peralatan di ruang SerVer ataU sampai generator siap digunakan。 2. Group IT Infrastructure is responsible for the 2 Group I Infrastructure bertanggungjawab security and maintenance of Server Rooms: Untuk melakukan pengamanan dan pemeliharaan terhadap ruang server: A. Security a All entrances and exits to the Server Room must be physically secured by A Pengamanan a Semua pintu masuk dan Keluar Ke ruang Serer harus diamankan

第 8 页

Sinarmas agribusiness and food Policy No。 GIT-P CO02 Group IT Policy & Governance Group Controller Date Issued 31st Jan 2021 SERVER ROOM POLICY Effective Date 31st Jan 2021 Classification I Revision No 2 Page 8 of 12 electronic or digital locks with failsafe measures in the event of electricity CUts has auditing features; and support biometric solutions (e.9- finger print and face recognition) card reading; and Keypad (PIN): Entrances and exits should also be supplemented by physical locks。 Secara fisik dengan kunci elektronik ataU digital dengan langkah yang aman jika terjadi pemadaman listrik; memiliki fitur audit; dan mendukung solusi biometris (contoh sidik jari dan pengenalan wajah); membaca kartu; dan papan tombol (PIN). Pintu masuk dan Keluar juga harus ditambah dengan kunci fisik。 b Peralatan rak dengan pintu harus selalu ditutup setiap saat Apabila tidak mempunyai pintu yang dapat dikunci, pastikan bahwa pintu masuk fisik ke ruang server dapat dikontrol。 Ruang Serer harus dilengkapi dengan kamera pengawas (CCTV) yang mencakup semua pintu masUk dan Keluar selain ruang Serer itU sendiri。 Memastikan perangkat Kamera CCTV bekerja dengan baik untuk memantau bagian dalam; pintu masuk dan keluar dari ruang server。 b. Equipment racks with doors must be Kept shut at all times. If having locked doors are not possible; ensure that physical entry into the Serer room can be controlled。 C Server Rooms must be equipped with surveillance Camera Or CCTV, covering all entrances; exits and the Serer room itself Ensure that the CCTV Camera devices are operational and sufficiently covers all the necessary angles for monitoring the insides; entrances and exits Of the Server Room. An exception is given if the rooms are only storing network equipment (ie。 aCCeSS switches): Pengecualian diberikan jika ruangan hanya menyimpan peralatan jaringan (seperti: switch akses). 4 Ensure all objects or equipment are securely attached, whether On the floor, ceiling; wall Or within secured racks_ 0 Memastikan semua benda ataU peralatan terpasang dengan aman; baik di lantai; langit langit; dinding atau di dalam rak yang aman。 e Ensure that 00 unauthorized communication equipment (such 35 modems; printers Or fax) are placed inside Server Rooms_ e Memastikan bahwa tidak ada peralatan Komunikasi yang tidak resmi (seperti telepon genggam; modem printer ataU faks) yang ditempatkan di ruang serer [ Head Of I Infrastructure is responsible for security Of all assets in the Serer room. Therefore any assets t0 be placed in SerVer room must be approved by Group I Infrastructure 十 Head of IT Infrastructure bertanggung jawab atas Keamanan seluruh aset yang berada di ruang Serer。 Oleh karena itu setiap aset yang akan ditempatkan di ruang SerVer harus disetujui oleh Group |T Infrastructure。

第 9 页

Sinarmas agribusiness and food Policy No。 GIT-P C002 Group TT Poliay & Governance Date Issued 31st Jan 2021 SERVER ROOM POLICY Group Controller Effective Date 31st Jan 2021 Classification Revision No。 2 Page 9 of 12 9. In order to perform equipment installation and removal in the server room; personnel needs to submit an Installation and Removal Form; and fully approved by Head Of Infra Operations and Head Of I Infrastructure. 9 Untuk dapat melakukan instalasi dan pemindahan peralatan di ruang Server personil harus mengajukan form instalasi dan pemindahan; dan disetujui Oleh Head Of Infra Operations dan Head Of | Infrastructure. Installation and removal form must be filled in with: Equipment description; i Equipment serial number; 。 Equipment usage; and; i。 Reason for installationl removal: Form instalasi dan pemindahan harus diisi dengan: Deskripsi peralatan; i Nomor seri peralatan; i。 Penggunaan peralatan; dan; h Alasan instalasil pemindahan。 8 AcCesS 8 Akses a Access to Server Rooms must be specifically registered for entry to the Server Room; e.9, I0 card finger print; biometrics. Akses Ke ruang Serer harus menggunakan akses KhUsUs yang terdaftar seperti: ID card; sidik jari; biometrik. b Visitor records must be Kept and maintained to log all entries and exits by employees and third-party visitors。 The minimum information for each record shall consist of visitors name identification cardl passport number; date Of Visit; entry time; exit time; purpose Of Visit; Visitor's company, and contact number。 And for third- party visitors; the name of the Group I Sponsor。 All Visitors must be recorded without any exception。 b Catatan pengunjung harus disimpan dan dipelihara untuk mencatat semua aktivitas masuk dan keluar Oleh karyawan dan pengunjung pihak ketiga. Informasi minimal untuk setiap catatan terdiri dari nama pengunjung; kartu identitas nomor paspor; tanggal kunjungan; waktu masuk; Waktu keluar; tujuan kunjungan; perusahaan pengunjung, dan nomor kontak pengunjung. Dan untuk pihak ketiga; nama Group I sebagai Sponsor Setiap pengunjung harus memiliki catatan tanpa terkecuali. C Semua pengunjung harus didampingi setiap saat Oleh karyawan perusahaan yang berwenang; baik dari tim |T Infrastruktur; atau General Affairs Central Business Services ("GA") 0 Head Of I Infrastructure diijinkan untuk memberikan akses permanen ataU sementara kepada staff terkait C All visitors must be escorted at all times by an authorised Company employee; either from the I Infrastructure team Or from General Affairs Central Business Services ("GA") 0 The Head Of I Infrastructure is permitted to grant permanent Or temporary aCCeSs to relevant staff

第 10 页

Sinarmas agrbusiness and food Policy No。 GIT P C002 Group TT Policy & Governance Group Controller Date Issued 31st Jan 2021 SERVER ROOM POLICY Effective Date 31st Jan 2021 Classification I Revision No。 2 Page 10 of 12 who require aCCeSS, apart from all serer operators and network operators that are responsible for day tO day operations such as change of backup tapes; patching Of phonelnetwork ports are allowed aCCeSS yang membutuhkan akses; selain Semua operator server dan operator jaringan bertanggung jawab untuk operasional sehari hari seperti penggantian backup tape; menambal port ponselljaringan yang diijinkan akses e The Head Of I Infrastructure Will review the list of IT employees with permanent access to Server Rooms during the fourth quarter Of every year Or within 30 days whenever there is 3 change in organization structure transfer resignation Within I Infrastructure。 Head Of I Infrastructure akan meninjau daftar karyawan | dengan akses permanen Ke ruang Serer dalam kuartal keempat setiap tahun atau dalam waktu 30 hari setiap kali ada perubahan dalam struktur organisasi transfer pengunduran diri dalam I Infrastructure Struktur organisasi I Infrastructure akan dievaluasi setiap bulan。 [ Temporary access can be granted to certain external parties (ex: consultant; technician; etc.) With the approval Of the Head Of 仃 Infrastructure; and accompanied by on-duty IT Infrastructure's employee While in the server room + Akses sementara dapat diberikan kepada pihak luar yang berkepentingan (contoh: konsultan; teknisi, dll) dengan persetujuan Head Of I Infrastructure dan didampingi oleh karyawan yang telah disetujui selama berada didalam ruang server。 C. Maintenance Periodic preventive maintenance On SerVer equipment; networks; UPS, Sensors, door accesses and cooling systems b Calculation Of the capacity Of serVers; storages; networks electricity and cooling system that are being used_ C Ensure proper operation of all other supporting measures Of Server Rooms outlined in Section 1. This also includes the security Of electrical resources ie Stabilizers; Arresters; and Emergency Circuit Breakers。 C Pemeliharaan a Melakukan preventive maintenance SeCara berkala terhadap perangkat Server network, UPS, sensor; akses pintu dan sistem pendingin b Menghitung kapasitas serer storage; network; listrik dan Sistem pendingin yang terpakai。 C Memastikan operasi yang tepat dari semua langkah pendukung lainnya dari ruang Serer yang diuraikan pada bagian 1 Ini juga mencakup Keamanan sumber daya listrik yaitu: Stabilisator; anti petir dan pemutus sirkuit darurat。

第 11 页

Sinarmas agribusiness and food Policy No。 GIT-P CO02 Group TT Polay & Governance Date Issued 31st Jan 2021 SERVER ROOM POLICY Group Controller Effective Date 31st Jan 2021 Classification Revision No. 2 Page 11of 12 d. Procedures for the safe handling of equipments in the Serer room due to power supply failure from PLN andlor generator is covered in Prosedur Penanganan Server Pada Saat Listrik Padam (I-P0-033). 4 Prosedur penanganan peralatan dalam server room secara aman saat terjadi kegagalan penyediaan sumber daya listrik dari PLN danlatau genset tercakup pada Prosedur Penanganan Server Pada Saat Listrik Padam (I- P0-033). 3 The relocation ofany server room that can 3 Pemindahan ruang Serer yang cause interuption in accessing information menyebabkan terhentinya akses sistem system for more than 48 hours; Shall be informasi selama lebih dari 48 jam wajib approved by all Executive Vice Presidents mendapat persetujuan dari seluruh (level 24-26) Whose functions are impacted Executive Vice President (level 24-26) by this moVe; and subject to IT Group's yang terkena dampak pemindahan ruang assessment of the overall impact in the SerVer tersebut; dan mengacU pada business。 penilaian Group 仃 atas dampak Keseluruhan terhadap bisnis。 4 Non-compliance to the Policy: 4 Ketidakpatuhan terhadap kebijakan: The Company reserves the right to take Perusahaan berhak mengambil tindakan appropriate disciplinary action UpP to and disipliner yang sesuai hingga dan termasuk including termination for non-compliance pemutusan hubungan kerja karena with this policy, and shall be reported to the ketidakpatuhan terhadap kebijakan ini, dan relevant employee's related superior at the harus dilaporkan kepada atasan karyawan minimum Of Senior Vice President (level terkait minimal Senior Vice President (level 22-23), by at least the relevant IT Vice 22-23), oleh Vice President IT terkait (level President (level 19-21). 19-21). 5. Any exception to this policy Can be 5. Pengecualian dari kebijakan tersebut di atas requested to the Head of IT Infrastructure dapat diajukan ke Head of IT Infrastructure with an approval at least by the Vice setelah mendapatkan persetujuan dari President (level 19-21) together with the atasan terkait minimal setingkat Vice Senior Vice President (level 22-23) of the President (level 19-21) beserta Senior Vice relevant department。 The exception list President (level 22-23). Daftar atas should be reported to the relevant pengecualian ini dilaporkan secara tiga (3) Executive Vice President (level 24-26) bulan sekali Ke Executive Vice President every three (3) months by Head Of terkait (level 24 ~26) Oleh Head Of I Infrastructure. Infrastructure。

第 12 页

Sinarmas agribusiness and food Policy No。 GIT-P C002 Group T Polcy & Governance Group Controller Date Issued 31st Jan 2021 SERVER ROOM POLICY Effective Date 31st Jan 2021 Classification Revision No。 2 Page 12of 12 APPENDIX LAMPIRAN NIA NIA REFERENCE REFERENSI 1 Prosedur Penanganan Server Pada Saat 1 Prosedur Penanganan Serer Pada Saat Listrik Padam (I-P0-033) Listrik Padam (I-P0-033)