Data Center & Asset Physical Security
- Production infrastructure is hosted in a contracted, secured colocation data center with restricted, documented access.
- Physical assets are inventoried and access restricted to authorized personnel in owned facilities and third-party hosting locations.
- Media and equipment are physically secured, and a documented physical-security incident process is in place.
Framework Alignment: NIST CSF PR.AA, ID.AM; CMMC Level 1 (PE); GDPR Art. 32, 28; ISO 27001:2022 A.7.3, A.7.8
