Home / Consulting & design / Survey criteria
IT infrastructure survey criteria
The specific checklist COREIT examines when surveying the current state, in 6 categories and not just network security.
6 survey categories
Each category has its own set of criteria
The survey result is the basis for choosing the suitable Care level (see the 4 Care levels) and proposing the architecture within the package CONSULT-DESIGN.
How to read the results: each criterion is measured by one specific indicator and rated on 3 levels, like a lab report — Alert (needs early action, high risk of interruption), Needs improvement (not critical but should be upgraded), OK (meets operating standard). The thresholds below are references based on common industry practice. The exact level for your system is determined through a real survey.
1. Network security
| Criterion | Metric | Alert | Needs improvement | OK |
|---|---|---|---|---|
| Rule firewall | % of redundant/overly broad rules with no clear purpose | >30% | 10-30% | <10% |
| Remote access authentication | MFA applied to VPN/remote access | No MFA | Partial MFA | Full MFA |
| Endpoints & patches | % of machines missing security patches | >20% | 5-20% | <5% |
| Network segmentation | VLAN separation for guests/staff/departments | One shared network | Partly separated | Fully separated |
| Incident history | Number of security incidents in the last 12 months | 2 or more, not fully resolved | 1, resolved | None recorded |
2. Internal network (LAN)
| Criterion | Metric | Alert | Needs improvement | OK |
|---|---|---|---|---|
| Gateway redundancy | HSRP/VRRP in place and failover tested | None (single point of failure) | Yes, not tested | Yes, tested regularly |
| Backbone load at peak hours | % utilization versus designed bandwidth | >80% continuously | 50-80% | <50% |
| Switch/AP age | Device age since purchase | >7 years, out of vendor support | 4-7 years | <4 years |
| Loop prevention | STP/RSTP configured across the network | Not configured | Partial | Complete across the network |
3. External connection (WAN/ISP)
| Criterion | Metric | Alert | Needs improvement | OK |
|---|---|---|---|---|
| Number of lines | Number of independent carriers & failover mechanism | 1 line, no backup | 2 lines, manual switchover | 2 lines, automatic |
| Actual bandwidth | % measured versus the carrier's commitment | <70% | 70-90% | >90% |
| Latency | Measured at peak hours, domestic routes | >100ms | 50-100ms | <50ms |
| Packet loss rate | Packet loss at peak hours | >1% | 0.1-1% | <0.1% |
4. Power & server room environment
| Criterion | Metric | Alert | Needs improvement | OK |
|---|---|---|---|---|
| UPS runtime | Runtime versus actual load | <5 minutes | 5-15 minutes | >15 minutes |
| Backup generator | Present, and how often it is tested | None | Yes, not tested regularly | Yes, tested regularly |
| Server room temperature | Average temperature (ASHRAE reference) | >27°C or large fluctuations | 24-27°C | 18-24°C |
| Server room humidity | Relative humidity | Outside the 40-60% range | At the edge of the recommended range | Within the 40-60% range |
5. Servers & storage
| Criterion | Metric | Alert | Needs improvement | OK |
|---|---|---|---|---|
| CPU/RAM load | Average % utilization at peak hours | >85% | 60-85% | <60% |
| Backup frequency | Data backup cycle | No schedule / >7 days | Weekly | Daily or more often |
| Restore testing | How often data restore is tested | Never tested | Every >6 months | Every ≤6 months |
| Free storage capacity | % free of total capacity | <10% | 10-25% | >25% |
6. Wifi
| Criterion | Metric | Alert | Needs improvement | OK |
|---|---|---|---|---|
| Coverage | Number of dead spots affecting operations | Many, frequent | 1-2 minor spots | Even coverage, no dead spots |
| Device density per AP | Number of devices connected at the same time per AP | >50 | 30-50 | <30 |
| Wireless security | VLAN separation for guests/staff | One shared network, one password | Partly separated | Fully separated by group/area |
Want a survey of exactly these 6 categories for your system?
Book a CONSULT-DESIGN survey and get an assessment report for each category within a few working days.