• Facilities are protected against fire, water damage, vandalism, and other location-specific threats.
• Uninterruptible power supplies and surge protection guard against power disruptions and voltage events.
• A clear-desk and clear-screen policy is enforced organization-wide.

Framework Alignment: NIST CSF PR.IR; GDPR Art. 32(1)(b); ISO 27001:2022 A.7.5, A.7.11, A.7.7