Iron Mountain Uses a Single Assessor for Agile Expansion of Data Center Compliance

Over 156,000 organizations in the corporate and public sectors depend on Iron Mountain to protect what matters most.

Iron Mountain stores and protects billions of customer information assets – everything from medical records and business documents to some of the world’s most valuable historical and cultural artifacts. As a result, secure and compliant business practices are extremely important. When Iron Mountain expanded its data center colocation business, it was critical to establish a partnership with a first-rate auditing firm to codify Iron Mountain’s ability to maintain and exceed industry standard compliance requirements for customers in highly regulated industries.

With the exponential growth of consumption-based/cloud services, the corresponding risks have skyrocketed, disrupting IT departments globally. Highly regulated organizations require third-party service providers to maintain FISMA-compliant infrastructure while balancing efficient, agile, and cost-effective IT. The rapid rate of technology change also affects the ability to forecast future demand and commit capital to long-term projects.

So, what are highly regulated organizations doing to solve the challenge? They are going big–finding global brands they know and trust, who feature comprehensive compliance portfolios that satisfy specific regulatory needs.

After 30 years of providing wholesale data center management services to enterprise customers, Iron Mountain found itself fielding multiple requests from existing customers for a secure data center colocation solution that would meet the needs of highly regulated industries. While Iron Mountain is well known for storage and information management, third-party assessment would help validate the company’s expansion into the data center colocation space. By leveraging Schellman’s single assessor advantage, Iron Mountain’s data center team quickly and effectively completed the certifications and attestations that their highly regulated customer base required.

Schellman Services

Iron Mountain Data Centers initially worked with Schellman to obtain a NIST attestation to assist their federal customers with FISMA efforts. Soon after followed additional projects, including an ISO 27001 certification and PCI-DSS validation.