perimeters of a building or site containing information processing facilities should be physically
sound;the exterior roof, walls and flooring of the site should be of solid construction and all external doors
should be suitably protected against unauthorized access with control mechanisms,; doors and windows should be locked when unattended and external protection
should be considered for windows, particularly at ground level;