Ensure that offices, rooms, and facilities are physically secure.

Protect secure areas by appropriate entry controls.

Establish physical security perimeters to protect areas that contain information and information processing facilities.