The physical hardware that hosts applications and data must be secured by the cloud service provider.

• Locked wiring closets and restricted access to MDF/IDF areas
• No windows or secured windows only
• Protected cable runs and communications infrastructure
• Security cameras and intrusion detection systems
• Hardened management stations
• Strict control of access to data center floors
• Biometric multi-factor authentication for authorized staff
• Two-factor authentication at minimum for privileged access

Hardware security requires both physical barriers and administrative controls to reduce the risk of unauthorized access, tampering, and theft.