Minimum security requirements for computer operations centers

Incorporates facilities security into overall protection of IT assets

Establishes requirements over outsourcing data processing facilities