Kinetic Protection Services

Canada's blast design standard, CSA S850:25, requires the owner of a building to define the threat the building is designed against. The published federal physical security guidance leaves that definition to each department. None of it names the uncrewed aerial system as a means of delivery or sets a threat for missiles, and the blast standard excludes the penetration, fragmentation and fire those weapons produce.

Move Add Change provides the threat definition, the assessment, the plan and the assurance that close that gap for the data centres that host sovereign and critical workloads. The work is carried out under our Kinetic Protection Standard, KPS-1, and is offered as a modular service, consumed in stages.

Where the standard comes from

KPS-1 comes from the work behind SAGE, the Move Add Change program for sovereign infrastructure. SAGE is designed to provide hardened, kinetically resilient processing for defence and government workloads. KPS-1 sets out what kinetically resilient means in practice, and it applies to any facility that hosts sovereign and critical workloads, whichever operator runs it.

How the service works

The service has four parts: Assess, Plan, Retrofit and Monitor. An owner can stop after any of them.

Assess

We start with a fixed-fee Definition Report. It sets a design basis threat for the owner to adopt, with a protection level for each zone of the facility, as CSA S850:25 requires the owner to determine. The threat covers aerial and stand-off threats alongside the person-borne and vehicle-borne threats in current federal guidance. The report also fixes the fee for each later stage. We then assess the facility against KPS-1 by zone and layer, from the site and its airspace to exposed plant, compartmentation, detection and continuity, and we record each gap in a register. Any judgment of structural or blast performance is referred to licensed engineers.

Plan

We produce the make-ready plan that brings the facility to the standard: work packages, sequence, permits, delivery capabilities and order-of-magnitude costs.

Retrofit

The owner delivers the works and we assure them. Licensed professional engineers engaged by the owner carry out and seal the structural analysis, and the owner competes the work. We verify the completed works against KPS-1, and the owner issues a compliance statement on that evidence. We can also act as the owner's representative during the works. We do not provide engineering services and do not build.

Monitor

An Annual Review renews the threat definition and the compliance record each year, so the owner can show regulators, insurers and tenants that the protection still holds.

Who we serve

We serve Canadian sovereign cloud providers, data centre operators, managed service providers, banks and other federally regulated institutions, facility owners and federal departments. The services are host-neutral and facility-neutral, and they apply to surface and underground sites.

To discuss a facility, contact Paul Desjardins at paul.desjardins@moveaddchange.ca.