The organization designs its physical security measures in accordance with the principle of layered protection. Layered protection means implementing a set of complementary security measures.
For example, the exterior walls and shell of a building may form the first level of security. Access control then forms the next layer, and information with higher protection requirements is handled only within the innermost parts of the building to prevent unauthorized entry. Technical security solutions (such as storage units, alarm systems, video surveillance, and lighting) complement structural measures. The design also takes into account windows, doors, and other openings.