UK Defence Standard 05-138 - Cyber Security for Defence Suppliers DEFSTAN-PHYSICAL: Physical Security

Premises and equipment processing MOD Identifiable Information must be physically protected proportionate to Risk Profile, including reception controls, access logs, and secure rooms where required.