Practices for Administration of Physical and Operations Security