ANSI/TIA-942 requires a risk assessment–based approach to physical security; ballistic protection is not mandated but may be justified by threat analysis.
A is incomplete (it may still be required by risk).
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit