The Certified Data Center Facilities Operations Manager (CDFOM)

In EPI’s safety and statutory requirements framework, the Safety Manager’s role is strictly supervisory during ongoing work activities . They are responsible for monitoring, verifying compliance, ensuring safe practices, and intervening only to correct unsafe conditions— not to physically participate in the hazardous task .

Key safety principles include:

Independence of the Safety Function The Safety Manager must remain impartial and fully observant. If they participate directly in labor activities (such as lifting equipment), they can no longer maintain oversight of:

ongoing safety compliance

worker actions

environmental hazards

risk escalation

Conflict of Responsibilities By physically engaging in the task, the Safety Manager becomes distracted and loses supervisory visibility, which introduces risk to the entire operation.

Competency and Authorization Requirements Personnel assigned to physically move heavy equipment must:

be authorized workers

be trained in manual handling

have been briefed for the specific PTW-controlled activity

The Safety Manager is not part of the operational lifting team unless specifically assigned beforehand, which is not the case here.

EPI’s Supervisory Separation Principle The safety oversight role must remain dedicated and unbroken during all hazardous or controlled work activities.

Therefore, the Safety Manager must not step in to replace or supplement labor resources.

Correct answer: A — No.

EPI DCFOM-Aligned Reference Concepts

Safety oversight must remain independent and uninterrupted.

Safety Manager responsibilities do not include participating in physical hazardous activities.

Supervisory personnel cannot assume operational roles during high-risk work.

An Information Security Management System (ISMS) is designed to protect information assets through structured controls, policies, and risk management practices.

EPI aligns with globally accepted security frameworks (e.g., ISO/IEC 27001), where the foundation of an ISMS is the CIA triad :

C — Confidentiality

Ensures information is accessible only to authorized persons.

I — Integrity

Ensures information is accurate, complete, protected from unauthorized modification.

A — Availability

Ensures information and systems are accessible when required.

Implementing an ISMS aims to safeguard these three fundamental information security objectives.

Why the other options are incorrect:

A — This focuses only on records retention, not information security as a whole.

B — Omits integrity and availability, which are essential ISMS elements.

D — Too narrow; ISMS covers all information assets, not just customer records.

Thus, the correct answer is C , which fully represents the CIA triad.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

ISMS is responsible for protecting confidentiality, integrity, and availability of all information assets.

The CIA triad forms the basis of information security objectives.

Predictive maintenance is defined as:

“Maintenance executed based on real-time or trend-based performance monitoring to intervene just before failure occurs.”

Predictive maintenance uses:

Condition monitoring

Vibration analysis

Sensor data

Temperature, load, and performance metrics

Trend analysis

Analytics predicting impending failure

This allows maintenance to be performed just-in-time , preventing unplanned downtime.

Why other options are incorrect:

A describes preventive maintenance (routine/time-based).

C describes reliability-centered or historical pattern scheduling.

D is close but refers more to condition-based maintenance, which is a subset; predictive maintenance specifically uses monitoring to forecast failure, not just detect issues.

Thus, B is the most correct definition.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Predictive maintenance relies on monitoring equipment conditions and performance trends.

It reduces downtime and optimizes maintenance schedules.

In Service Level Management (SLM), EPI highlights that customer feedback—such as surveys, complaints, and satisfaction assessments—is a core driver for the Service Improvement Process (SIP).

The SIP is designed to:

Identify weaknesses in services

Address dissatisfaction

Improve service delivery quality

Optimize process performance

Remove recurring issues

Customer surveys and complaints provide:

Direct feedback on service experience

Indicators of service quality gaps

Evidence of unmet expectations

Insights for corrective and preventive actions

These are the primary input sources for generating SIP actions.

Why the other options are not correct:

A. Needs Analysis — focuses on understanding customer requirements before service definition, not post-operational feedback.

C. Capability Assessment — evaluates internal service delivery capability, not customer perception.

D. Service Portfolio — defines available services, not improvements.

Therefore, Service Improvement Process is the correct selection.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

SIP is fueled by customer feedback such as complaints and surveys.

SLM uses feedback to drive improvements and maintain SLA quality.

Security incident management is a core function in maintaining physical security integrity within the data center environment. The main purpose of this process is to respond to, manage, and eliminate security breaches and vulnerabilities that could compromise facility protection, customer assets, or sensitive operational areas. According to EPI’s security governance principles, a security incident may include unauthorized access attempts, misuse of credentials, badge anomalies, tailgating, tampering, suspicious activities, or procedural violations.

The security incident management process ensures that such events are logged, assessed, investigated, escalated, and resolved in a timely and structured manner. It also identifies root causes and potential systemic weaknesses that must be corrected to prevent recurrence. This includes reviewing procedures, improving physical controls, reinforcing training, and implementing corrective or preventive measures.

Option A is unrelated; guard assignment is part of staffing, not incident management. Option C refers to testing emergency plans, which is part of preparedness and exercises. Option D refers to compliance activities, but compliance is not the objective of incident management—it is a result .

Therefore, the correct answer is B – addressing breaches and weaknesses .

Having the correct spare parts strategy is critical for minimizing downtime, especially for mechanical systems such as chillers, CRAC units, pumps, AHUs, and cooling distribution systems. Within the EPI Facilities Management framework, downtime risk and spare parts strategy are tightly linked. When the probability of component failure is high, or uptime requirements are extremely stringent, the recommended approach is to maintain full spare parts onsite . This ensures rapid replacement of any failed component without waiting for vendor delivery, logistics, or procurement delays.

A full parts at site strategy means that all critical consumable and non-consumable parts—motors, sensors, belts, bearings, filters, control boards, valves, and other essential components—are immediately available. This is the approach used in high-availability data centers targeting Tier III or Tier IV performance levels or facilities operating with strict SLA commitments.

Options A and B increase repair time because missing parts cause extended outages waiting for shipment or vendor arrival. Option D is ineffective because lower-cost parts often fail more frequently, making only high-cost inventory insufficient.

Thus, the safest, lowest-downtime option is full parts at site .

The publication process in document management ensures that:

The correct, approved version of a document is released.

It is distributed to all required locations (physical or digital).

Outdated versions are removed from circulation.

Staff always use the correct operating procedures and guidelines.

Why other options are incorrect:

A : Compliance is a by-product, not the objective.

B : Creation happens before publication.

D : Archiving is part of the document retirement process, not publication.

Thus, C is the correct answer.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Publication ensures the latest controlled documents are available where needed.

Document control prevents use of outdated or incorrect procedures.

When operators receive excessive non-alarm notifications , this indicates that:

Thresholds are not well-configured

Events are misclassified

Alarm definitions are incorrect

Monitoring profiles require tuning

EPI’s monitoring best practices state that the correct response is to:

Review alarm information and adjust definitions, thresholds, and filtering.

This ensures that:

Only relevant alarms reach operators

Noise is minimized

Operators maintain focus on true issues

SLA-related metrics are accurately monitored

Why other options are incorrect:

A : Training is secondary and will not fix incorrect alarm settings.

C : Ignoring notifications is dangerous and violates operational control.

D : Upgrading software may not resolve the underlying configuration problem.

Thus, B is correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Monitoring systems must generate actionable alarms, not noise.

Alarm thresholds and event filters must be reviewed and optimized regularly.

EPI guidelines on asset management state that assets should be tagged and entered into the asset management database as early as possible , specifically:

At the moment of unpacking.

Reasons:

Prevents loss or misplacement

Ensures traceability during staging, testing, and installation

Supports lifecycle tracking from the earliest stage

Ensures accurate configuration and inventory management

Why other options are incorrect:

A : Contract activation is unrelated to labeling.

C : Testing occurs after unpacking; labeling must precede it.

D : Commissioning is too late; the asset must already be tracked.

Thus, B is correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Asset labeling begins as soon as equipment is unpacked.

Early tagging ensures full lifecycle traceability and compliance.