Facilities and Physical Security

Cloud providers must secure the physical locations where data centers operate. This includes protecting the facility itself, controlling access, and ensuring resilience against physical and environmental threats.

Key Controls

  • Secure location selection
  • Fencing and perimeter protection
  • Surveillance cameras and alarms
  • Mantraps and access control points
  • Guard patrols and building access procedures
  • Power redundancy and backup generation
  • HVAC, fire detection, and suppression systems
  • Safe handling of people, assets, and shipments

People Security

Security teams should apply strong hiring practices, background checks, separation of duties, role rotation, and strict employee termination procedures.

Physical Security Goal

The objective is to restrict unauthorized access to facilities, protect equipment, and maintain service continuity even in adverse conditions.