This work program outlines physical security best practices for data centers and information processing/storage facilities. It then details the control practices and control techniques that should be investigated as part of an audit or review of physical security.