All servers shall have sufficient physical/logical intrusion protection against unauthorized access.