Physical measures, policies, and procedures to protect a covered entity's electronic information systems and related buildings and equipment from natural and environmental hazards, and unauthorized intrusion.
Source(s):
NIST SP 800-66 Rev. 1
from
45 C.F.R., Sec. 164.304