As far as I'm aware (I'm not exactly central to our information security processes), it is more of the latter. Due to the amount of electric power we control,

As far as I'm aware (I'm not exactly central to our information security processes), it is more of the latter. Due to the amount of electric power we control, we, as a company, have been deemed critical infrastructure by the state and as such, we have to comply with rather rigorous information security standards. We do, however, also have an uninterruptible power supply for the most critical hardware.