Physical access to servers and data centers should be restricted to authorized personnel only. This ensures that malicious actors cannot gain access to the systems