ANSI/TIA-942 and EN 50600: Ratings and Protection Classes

Colocation contracts often rest on a single line such as "Rated-3" or "EN 50600 Availability Class 3", yet few buyers know what those labels test, what they leave out, or how to verify them. ANSI/TIA-942 and the EN 50600 series (published internationally as ISO/IEC 22237) are the two main design standards for data centre facilities and infrastructure. Both classify resilience in four levels and both cover physical security, but they are built differently and certified differently. This guide explains the TIA-942 ratings and certification types, the EN 50600 classification system and its protection classes for physical security, how to read certificates and audit evidence, and how to use both in colocation and hosting due diligence. It is for security architects, third-party risk teams, infrastructure buyers and facilities managers. For the controls you run inside a facility, see the Data Centre Security Guide; this page explains the standards that sit above them.

Key takeaways

Four levels in each scheme. TIA-942 rates facilities Rated-1 to Rated-4 (basic, redundant capacity components, concurrently maintainable, fault tolerant); EN 50600 classifies availability, physical security and energy efficiency enablement separately, with protection classes 1 to 4 for physical threats.
Design is not the same as operation. A TIA-942 design certificate is valid for one year; a facility certificate is valid for three years with surveillance audits at the end of years one and two. Ask which one you are being shown.
EN 50600 starts from risk. EN 50600-1 requires a business risk analysis before an Availability Class is chosen, and EN 50600-2-5 sets protection classes against unauthorised access, intrusion, fire and environmental events.
Neither standard is an information security certification. They describe the building, power, cooling, cabling and physical security. Logical access, monitoring systems and the people and machine identities that run the site still need ISO/IEC 27001 or SOC 2 evidence.
Read the certificate, not the brochure. Check the issuing body, scope (which halls), level per subsystem, dates and certificate type, and confirm the entry in the issuer's public register.

What it is and who it applies to

ANSI/TIA-942

ANSI/TIA-942 is an ANSI-accredited standard developed by the Telecommunications Industry Association's TR-42 engineering committee (Telecommunications Cabling Systems). TIA describes it as covering data centres of all sizes, including enterprise, hyperscale, colocation, edge and modular facilities. Its scope runs across site selection and layout, telecommunications infrastructure, electrical and power, mechanical and cooling, fire protection and life safety, physical security, monitoring and infrastructure management, and redundancy planning. TIA's store lists the current edition as ANSI/TIA-942-C; TIA states that an addendum for edge data centres was published in early 2022. Conformance is voluntary unless a contract or regulator requires it.

EN 50600 and ISO/IEC 22237

EN 50600 is a European series from CENELEC technical committee CLC/TC 215, "Information technology: Data centre facilities and infrastructures". EN 50600-1:2019 (approved by CENELEC on 29 April 2019, superseding the 2012 edition) sets general concepts, terminology, reference models and the classification system. Part 2 documents give facility requirements; part 3-1 covers management and operational information; part 4 documents define key performance indicators. The ISO/IEC 22237 series from ISO/IEC JTC 1/SC 39 carries the same structure internationally: ISO/IEC 22237-1:2021 replaced the earlier technical specification ISO/IEC TS 22237-1:2018.

Who uses them

Operators and developers: to design to a target level and certify it as a market signal.
Colocation and hosting customers: to set minimum resilience and physical security in contracts and to compare sites on a common vocabulary.
Enterprise owners of in-house rooms: to justify investment and to document the design basis of an on-premises facility.
Auditors and regulators: as evidence for physical and environmental controls within wider frameworks such as ISO/IEC 27001 and operational resilience regimes.

Structure and key requirements

TIA-942 rating levels

Rating	TIA name	Topology	Physical protection
Rated-1	Basic Site Infrastructure	Capacity components without redundancy; one non-redundant distribution path to IT equipment	Limited protection against physical events
Rated-2	Redundant Capacity Component Site Infrastructure	Redundant capacity components; still one non-redundant distribution path	Improved protection against physical events
Rated-3	Concurrently Maintainable Site Infrastructure	Redundant components and multiple independent distribution paths, usually one active; any component can be serviced on a planned basis without disrupting users	Protection against most physical events
Rated-4	Fault Tolerant Site Infrastructure	Redundant components and multiple independent paths, all active; concurrently maintainable and tolerates one fault without downtime	Protection against nearly all physical events

Higher ratings bring stronger physical protection as well as more redundancy, which is why the rating matters to a security team and not only to facilities. Certificates can report results by area, so ask for the result per area as well as the headline.

TIA-942 certification types

Certificate	What is assessed	Validity
Design	Design documents reviewed for conformity with the target rating	One year, extendable while the site is not yet operational
Facilities	Physical on-site inspection plus related design documents	Three years, with surveillance audits by the end of years one and two and recertification by the end of year three
Ready	Modular data centres designed to the target rating	One year, recertified yearly

Audits are carried out by auditors from companies licensed by TIA as certification bodies. A design certificate tells you the plans conform; only a facilities certificate shows the built site was inspected.

EN 50600 classification system

EN 50600-1 clause 7 classifies a facility on three criteria over its planned lifetime: availability (7.2, including single-site and multi-site designs), physical security (7.3, covering unauthorised access, intrusion and environmental events) and energy efficiency enablement (7.4). Clause 5 requires a business impact analysis and risk analysis, and a conforming design must complete that analysis before selecting an Availability Class. The series uses four Availability Classes, Class 1 being the lowest and Class 4 the highest.

EN 50600-2-5 protection classes

EN 50600-2-5 (Security systems; current edition 2021, superseding the 2016 edition) addresses physical security against unauthorised access, intrusion, fire igniting within data centre spaces, and other internal or external events that would affect the defined protection level. It applies protection classes to each threat type, and the 2021 edition lists intrusion as a threat in its own right; confirm the class definitions in the purchased standard.

Clause	Protection class against	What a buyer should ask
6	Unauthorised access (premises, roofs, parking, pathways, cabinets), using a four-layer physical protection model	Which class applies to the space holding your racks, and how the layers map to the site plan
7	Intrusion into data centre spaces	Detection coverage and alarm response for each layer
8	Fire events igniting within data centre spaces	Detection and suppression class for the data hall and plant rooms
9	Environmental events other than fire within data centre spaces	Water detection, leak paths and segregation of plant
10	Environmental events outside data centre spaces	Site hazards such as flood and neighbouring activities

Clause 11 covers the systems that prevent unauthorised access and intrusion: security lighting, video surveillance, intruder and hold-up alarm systems, access control and alarm monitoring. It refers to the European product standards for those systems, including EN 50131 (intrusion and hold-up), EN 50136 (alarm transmission), EN 50518 (alarm receiving centres), EN 60839-11-1 (electronic access control) and EN 62676-1-1 (video surveillance).

Where Uptime Institute Tiers fit

Buyers often meet a third vocabulary: Uptime Institute's Tier I to Tier IV (basic capacity, redundant capacity components, concurrently maintainable, fault tolerant), certified by Uptime Institute against its own Tier classification. It is a separate scheme with its own certification and an operational sustainability component. The words overlap, so a contract should name the scheme, the level and the certificate type explicitly rather than say "Tier 3".

Identity and NHI requirements

Neither standard is an identity standard, but both depend on identity controls to mean anything. EN 50600-2-5 requires access control and alarm monitoring; TIA-942 lists physical security and monitoring and infrastructure management in its scope. In a modern facility those functions are software systems with their own accounts.

Physical access control systems: badge and biometric records are identities. Joiner, mover and leaver processes for staff, contractors and customer visitors must remove access as fast as logical access. See the Physical Security Guide for Security Teams.
DCIM, BMS and power management: data centre infrastructure management, building management and power monitoring platforms run with service accounts, SNMP communities, API keys and vendor remote access. Treat them as privileged. See the Building Management System Security Guide.
Customer portals and remote hands: colocation portals issue API tokens for ticketing, cross-connect orders and access requests. Scope them, rotate them, and know who in your organisation can authorise a visitor to your cage.
Device identities: PDUs, UPS units, cameras and environmental sensors each hold management credentials. Default credentials on this class of device are a known weakness; see the Device and IoT Identity Guide.

When you assess a provider, ask how these accounts are inventoried, who holds privileged access to infrastructure management systems, and how vendor maintenance access is approved and logged. A facility certified to the highest rating can still be undermined by a shared BMS administrator password.

Implementation steps

For operators designing or certifying a site

Run the risk analysis first. EN 50600-1 makes it a precondition for choosing an Availability Class; it is good practice for TIA-942 too. Record the business impact of downtime and the threats at the site.
Choose the target per area. Set the target rating or class for power, cooling, telecommunications, building and security separately, and justify any area below the headline.
Design to the standard and pre-assess. Use the standard text (purchase it from the publisher) and a gap assessment before formal audit.
Certify design, then facility. Obtain the design certificate, build, then obtain the facilities certificate through an on-site audit by a licensed certification body.
Maintain. Plan for surveillance audits, change control on any modification that affects redundancy or protection, and recertification.

For buyers doing colocation due diligence

Set minimum levels in the requirements: for example, a facilities certificate at a stated rating, or a stated Availability Class and protection class for the customer space.
Request the certificate and audit summary, and confirm them in the issuer's public register.
Check scope: which buildings, halls and suites are covered, and whether your space is inside it.
Pair resilience evidence with information security evidence (ISO/IEC 27001 certificate and statement of applicability, or a SOC 2 Type 2 report) for the provider's logical controls.
Visit, or commission a site assessment, focusing on access layers, visitor handling and plant room access. The Physical Security Site Assessment Checklist helps.
Write evidence rights into the contract: notice of certificate lapse or downgrade, annual copies of surveillance audit outcomes, and the right to audit.

Evidence and assessment

Evidence	What it proves	What to check
TIA-942 design certificate	Design documents conform to the target rating	Date, one year validity, not offered as proof of a built site
TIA-942 facilities certificate	Built site inspected against the rating	Certification body is TIA licensed, scope, three year validity, surveillance audit dates
EN 50600 or ISO/IEC 22237 conformity statement or certificate	Facility assessed against the series	Which parts and editions, classes per criterion, protection class per space, issuer accreditation
ISO/IEC 27001 certificate and SoA	Information security management system	Scope includes the site and infrastructure management systems
SOC 2 Type 2 report	Operating effectiveness over a period	Physical and logical access controls, exceptions, carve-outs

See How to Read a SOC 2 Report Guide for the information security half of the evidence pack.

Measures that show the standard is holding up

Certificate currency: days to expiry and surveillance audits completed on time.
Unplanned outages affecting customer load per year, against the redundancy the rating implies.
Physical access review completion and time to revoke leaver badges.
Privileged accounts on DCIM and BMS platforms reviewed in the last quarter.
Open findings from the last audit and age of the oldest.

Mapping to other frameworks

Topic	TIA-942 / EN 50600	NIST SP 800-53 Rev. 5	ISO/IEC 27001:2022 Annex A	NIST CSF 2.0
Access to premises and spaces	Physical security; EN 50600-2-5 clause 6	PE-2, PE-3	7.1, 7.2	PR.AA-06
Intrusion detection and surveillance	EN 50600-2-5 clauses 7 and 11	PE-6	7.4	DE.CM-02
Power and redundancy	Rating or Availability Class; EN 50600-2-2	PE-9, PE-11	7.11	PR.IR-02
Fire and environment	EN 50600-2-5 clauses 8 to 10; EN 50600-2-3	PE-13, PE-14, PE-15	7.5	PR.IR-02
Site and equipment placement	Site selection and layout	PE-18	7.8	PR.IR-02
Resilience planning	Redundancy and risk analysis (EN 50600-1 clause 5)	CP-2	5.30	PR.IR-03
Third-party facility assurance	Certificates and audits	SA-9	5.22	GV.SC-07

Common pitfalls

Design certificate presented as built. A one year design certificate is evidence of plans, not of a facility that was inspected.
Headline level hides a weak area. A strong electrical design with a single telecommunications entry or a weak access layer. Ask for the per-area result.
Scheme confusion. "Tier 3" in a contract without naming the scheme, so the provider can point to whichever label suits.
Scope gaps. A certificate that covers one hall while your racks sit in an expansion hall built later.
Facility standard used as a security certificate. Accepting a rating as evidence for logical access, monitoring or incident response, which it does not test.
Infrastructure management left out. Ignoring DCIM, BMS and remote vendor access, which can switch off power or cooling regardless of the physical rating. See the Power and Physical Infrastructure Dependency guide.

Practitioner checklist

Name the scheme, level, certificate type and scope in every colocation requirement and contract.
Verify certificates in the issuer's public register and record expiry and surveillance audit dates.
Ask for per-area results and the EN 50600-2-5 protection class for the space holding your equipment.
Pair facility evidence with ISO/IEC 27001 or SOC 2 Type 2 evidence for logical controls.
Review who can authorise access to your cage, including portal API tokens and remote hands requests.
Ask how the provider manages privileged and vendor access to DCIM, BMS and power management systems.
Write notice of certificate lapse or downgrade into contracts.
Reassess at renewal and after any major site change.

ANSI/TIA-942 and EN 50600 Guide: Ratings, Protection Classes and Colocation Due Diligence