# Physical Security

+ Physical Security
  + Controlled access with logs
  + 24x7 security guards
+ Storage Device Decommissioning
  + DoD 5220.22-M (National Industrial Security Program Operating Manual)
  + NIST 800-88 (Guidelines for Media Sanitization)
  + Ultimately degaussed and physically destroyed

------------------------------------------------------------------------------
AWS and Google Cloud data centers are non-descript facilities. 

Physical access is strictly controlled both at the perimeter and at building ingress points by professional security staff utilizing video surveillance, intrusion detection systems, and other electronic means. Authorized staff must pass two-factor authentication a minimum of two times to access data center floors. All visitors and contractors are required to present identification and are signed in and continually escorted by authorized staff.

Data center access and information are only provided to employees and contractors who have a legitimate business need for such privileges. When an employee no longer has a business need for these privileges, his or her access is immediately revoked, even if they continue to be an employee of the cloud vendor. All physical access to data centers is logged and audited routinely.