The first procurement question for a data centre is not how many officers to appoint, but who authorises each type of access. A company operating a server room and a multi-tenant technology campus have different requirements. For a facility in Ankara, distinguish responsibilities for communal areas, tenant offices and technical spaces before comparing proposals.
Match competence to the actual assignment
NIST SP 800-53 Rev. 5 is a catalogue of security and privacy controls that includes physical and environmental protection. Using that framework does not turn a security officer into a systems administrator or maintenance engineer. A supplier's reference to NIST does not itself demonstrate certification.
The guarding team's contribution should follow the agreed admission and reporting instructions. Shutting down a server, adjusting cooling equipment or authorising electrical work belongs to the relevant technical personnel. If the proposal blurs these responsibilities, clarify the expected service before appointment.
Treat maintenance admission as more than a name on a list
These are editorial questions for a procurement discussion, not instructions for disclosing a facility's sensitive access arrangements or designing its technical systems.
- Which organisation or tenant approves the visit?
- Which task, area and period does the approval cover?
- Who communicates a change to the receiving officer?
- If an escort is required, how is the responsible employee notified?
For example, admitting a maintenance contractor to the building does not authorise entry into every tenant's technical space. Officers should have an identified contact to resolve uncertainty rather than being expected to interpret the technical work themselves.
Make equipment handovers traceable
A device leaving for repair, a replacement component being delivered and a visitor's personal laptop are different transactions. Align the organisation's equipment movement rules with the guarding team's recording and notification duties. A handover record does not confer permission to access data stored on a device. Passwords and unnecessary technical details should not become routine security-log entries.
Shift handovers can identify valid visit approvals, incomplete deliveries and changes to contact arrangements. Discuss how previous visits are distinguished from a new authorisation, particularly when the same external companies attend regularly.
Assess the working arrangement, not a list of technologies
Ask for sample assignment instructions, a report with personal information removed and an explanation of how conflicting instructions are referred for resolution. Rather than assuming every facility needs the same biometric system, establish how the supplier would work within the institution's existing arrangements. Product selection and the conditions for processing personal data require their own assessment.
When approaching Titan Savunma, describe operating hours, the tenant structure and the physical security service you are considering. Network credentials, detailed system diagrams and sensitive access information are not appropriate for an initial enquiry form.
