Hacking remotely from somewhere on the Internet is not the only way information assets can be compromised. There are also physical threats that must be considered, where logical controls used for system, application, and network security would be ineffective. Controls for physical security include safety measure for staff, physical access control and intrusion detection, physical site design and shielding of equipment, and the continuity of power supply and other support systems. Physical security mechanisms protect people, data, equipment, systems, facilities, and information assets in general. Building cybersecurity without physical security would be like building a house on sand. Interestingly, the trust anchor for many cybersecurity controls is typically some form of physical security, like protecting an authentication token or storing a cryptographic key in physical hardware which must be locked away.