Data Centers & OT-Cyber Lab
GUTEC University Critical Digital Infrastructure, Business Continuity, and OT Cybersecurity Laboratory
The Data Centers & OT-Cyber Lab is GUTEC University’s laboratory specializing in the engineering, design, commissioning, operation, and protection of critical digital infrastructure. Its main focus is on data centers, cloud and edge platforms, and industrial and urban service environments where OT/SCADA/BMS systems coexist with IT networks, automation, and control. It is a laboratory built for an unquestionable reality: the world runs on infrastructures that cannot fail and that must also be protected against technical, energy, operational, and cyber risks.
Today, data centers are not just “buildings with servers.” They are highly demanding facilities, where electrical power, advanced cooling, complex redundancies, physical security, continuous control, and strict regulations converge. In turn, digital transformation has extended the logic of data centers to many other critical assets: hospitals, airports, transportation, utilities, industry, control centers, water and energy networks, smart buildings, and technology campuses. They all have one thing in common: operational continuity is essential, and OT cybersecurity is a strategic obligation.
This laboratory was created to train global profiles capable of leading projects and operations in critical environments, combining MEP engineering, commissioning, control, data-based operation, and industrial cybersecurity. At GUTEC, a critical infrastructure specialist not only understands systems; they understand risks, continuity, evidence, protocols, operation, and resilience.
Why this laboratory exists: the terrain determines the project.
Digital infrastructure has become the core of the economy and essential services. Availability is no longer a technical indicator; it is a contractual promise, a regulatory requirement, a reputational imperative, and a direct economic factor. A data center failure can lead to massive losses, service interruptions, legal impacts, and brand damage. Similarly, a breach in OT systems can compromise water, energy, mobility, or industrial operations.
Critical assets are surrounded by simultaneous stresses:
increased energy demand and pressure for efficiency
increase in charge density and cooling requirements.
increased complexity in redundancies and topologies
demanding testing and thorough commissioning
increasing OT/IT integration
growing cyber threat
security, compliance, and traceability audits
need to operate with clear metrics and rapid response
The Data Centers & OT-Cyber Lab exists to respond to this scenario with a professional and global approach: to train specialists who can design and operate critical systems, while ensuring security and continuity in real-world conditions.
Mission of the Data Centers & OT-Cyber Lab
The laboratory’s mission is to develop applied knowledge and train international talent to design, build, implement, and operate critical digital infrastructures with high standards of resilience, efficiency, security, and OT cyber protection. This is achieved through:
- data center engineering (critical MEP, redundancy, operation)
- commissioning, IST, functional testing, and operational delivery
- availability, maintainability, and continuity management
- automation, BMS/DCIM, monitoring, and analytics
- OT/SCADA cybersecurity in critical assets
- risk governance and regulatory compliance
OT/SCADA cybersecurity in critical assets
What sets this laboratory apart is that it integrates two worlds that, in practice, must operate as one: the physical engineering of the asset (power, cooling, distribution, security, control) and the digital layer that governs it (OT, automation, monitoring, networks, cybersecurity). In many organizations, these are treated separately, and that is where incidents arise: excellent systems that are poorly operated, poorly segmented controls, exposed networks, indiscriminate alarms, incomplete response protocols, or insufficient commissioning.
This Lab works with a vision of “infrastructure as a system,” where every technical decision has operational and security consequences. The goal is to train professionals capable of leading:
- data center design and expansion projects
- operation and maintenance with a continuity mindset
- commissioning and validation of actual performance
- energy efficiency strategies without compromising resilience
- secure OT-IT integration
- protection against OT-specific cyber threats
Lines of applied research and development.
The laboratory is organized into lines aligned with global demand for critical infrastructure.
This line addresses the physical core of the data center: electrical distribution, backup, UPS, generators, switching, selectivity, and cooling architecture according to density and continuity requirements. We work with a mindset of resilience and maintainability: it is not enough for it to work, it must be able to be maintained without interruption, it must fail in a controlled manner, and it must recover quickly.
Here we study how to structure topologies and redundancies in operational terms, how to avoid single points of failure, how to design power and cooling paths to support planned maintenance, and how to document the system for audits and operation.
Load density and computing growth have transformed cooling. This line works with modern thermal strategies: containment, airflow management, humidity control, free cooling, indirect cooling, hybrid solutions, and approaches for high density. The laboratory focuses on real performance: thermal stability, control, efficiency, and reliability.
It teaches how to think about cooling as a data-driven system, not as “equipment sizing.” This involves well-placed sensors, consistent control strategies, smart alarms, and clear operational metrics.
When it comes to critical assets, design on paper does not guarantee performance. This line focuses on complete commissioning: plans, functional tests, start-up, balancing, control integration, failure tests, and IST (Integrated Systems Testing) processes. The goal is to make the asset verifiable and defensible: what is delivered must be tested, documented, and ready to operate.
We also work on preparing operational documentation: manuals, alarm matrices, procedures, updated plans, test records, and acceptance criteria.
This line addresses the control and operation layer: how a data center is integrated with DCIM/BMS, how monitoring is structured, how KPIs are defined, how alarms are managed, and how data is converted into decisions. A system without alarm management becomes noise; a system without trends becomes blindness.
Here we work on the logic of operation: dashboards for shifts, dashboards for management, reporting for clients, and traceability for audits. We teach how to design asset hierarchies, criticality, thresholds, and response protocols.
Continuity cannot be improvised. This line forms a culture of resilience: criticality analysis, scenarios, contingency plans, uninterrupted maintenance, change management, incident response, and recovery. Professionals are trained to think in terms of “service,” not just “equipment.”
Work is done on how to design operational plans that survive reality: shift rotation, maintenance execution, supplier coordination, and protocols that reduce human error.
This is one of the Lab's most distinctive features. OT cybersecurity has its own characteristics: availability and physical security take priority, systems may be legacy, patching times are complex, and the operational impact of an attack is immediate. That is why a realistic approach is taught: segmentation, hardening, access control, identity management, logging, detection, response, and recovery.
The lab addresses key OT security concepts: network architecture, zones and conduits, monitoring, change control, OT vulnerability management, vendor security and remote maintenance, and continuity in the event of cyber incidents.
As data centers and other critical assets incorporate analytics, platforms, automation, and connectivity, there is a growing need to integrate OT and IT without losing control. This line of work focuses on governance: roles, responsibilities, approval flows, change traceability, and “security by design” criteria.
It teaches how to build a common language between operations, engineering, IT, and cybersecurity, avoiding the typical mistake of each area managing its own part without an overall vision.
Efficiency in data centers cannot be an obsession that compromises availability. It must be a balanced, data-driven, and controlled strategy. This line of work focuses on how to improve PUE and energy performance without affecting thermal stability or redundancies, and how to document improvements for customers, audits, and ESG reporting.
Measurement, submetering, benchmarking, control optimization, and trend analysis strategies are studied to identify real opportunities.
Laboratory infrastructure .
- typical data center cases and architectures.
- electrical distribution schemes and backup strategies.
- cooling and thermal control diagrams.
- IST and commissioning test simulations.
- operational and incident scenarios (technical and cyber).
- monitoring, alarm, and reporting structures.
- change, maintenance, and response procedures.
Projects and case studies .
Laboratory projects are structured as real deliverables, with defensible documentation. Typical examples:
- conceptual design of electrical architecture with redundancy and uninterrupted maintenance plans
- High-density cooling strategy with control and metrics
- Commissioning plan and IST for structured start-up
- design of alarm matrix and asset hierarchy for operation
- business continuity plan with incident scenarios and response protocols
- OT-IT segmentation analysis and proposal for hardening control systems
- Data-driven operational audit: anomaly detection and optimization proposals
- DCIM/BMS integration project with governance and traceability criteria
Each case is delivered as a professional package: report, diagrams, acceptance criteria, test plans, and operating procedures.
Laboratory services for companies and institutions.
The laboratory can collaborate with operators, engineering firms, specialized construction companies, consulting firms, end customers, and government agencies in:
- technical review of MEP design for data centers and critical assets
- commissioning and IST plans and support during start-up
- data-driven operational and energy optimization audits
- monitoring architecture design and alarm management
- operational continuity and resilience assessment
- monitoring architecture design and alarm management
- operational continuity and resilience assessment
- OT-IT integration pilot projects with a secure approach
These collaborations are designed with clear deliverables and a replicable approach for multi-country deployment, in line with GUTEC’s global vision.
Opportunities for students and researchers.
Participating in this Lab allows you to build a highly distinctive profile because it combines skills that are rarely found in a single professional: critical engineering + commissioning + operation + OT security.
Students can join:
projects implemented with companies and operators
technical challenges of commissioning and control
operational data and performance analysis
incident simulations and protocol improvement
applied research projects in monitoring and security
The result is a professional portfolio with technical and operational documentation, especially valuable for roles in data centers, utilities, hospitals, industry, and transportation.
Publications and working papers.
- Commissioning and IST frameworks applied to critical infrastructure.
- Guidelines for alarm management and KPI-based operation.
- OT-IT integration strategies with a secure approach.
- resilience and continuity approaches for critical assets.
- best practices for energy efficiency and measurement in data centers.
Calls for projects.
- Applied projects with operators and companies.
- Operational and resilience challenges.
- OT-Cyber pilots with realistic scenarios.
- Commissioning and operational delivery projects.
Extended FAQs
No. Data centers are the main focus, but the laboratory also covers critical infrastructure with OT/SCADA: utilities, industry, transportation, hospitals, and smart buildings.
Fundamentals are covered, but the central focus is OT cybersecurity, where availability and operational continuity make all the difference.
Because in critical infrastructure, anything that is not tested in an integrated manner ends up failing in operation. Commissioning and IST turn design into verifiable reality.
Yes. Monitoring, alarms, trends, KPIs, and reporting are the pillars of the Lab. A critical asset without data is an asset that reacts too late.
Yes. The laboratory is designed for scalable and standardizable methodologies, with a global approach consistent with GUTEC.
