It involves securing the physical infrastructure of an organization such as data centers, servers, and other devices.