 It typically involves physical controls such as protective barriers and locks, uninterruptible power supplies, and shredders.Information security controls in the physical domain complement those in the logical domain (such as encryption), and procedural or administrative controls (such as information security awareness and compliance with policies and laws).Asset are inherently valuable and yet vulnerable to a wide variety of threats, both malicious (e.g.