Physical Access Controls. Expert shall take reasonable measures to prevent physical access, such as physical locks, security personnel, clean desk policy, and restricting access to rooms or facilities containing Personal Information, to prevent unauthorized persons from gaining access to Personal Information, or to ensure third parties operating data centers on Expert’s behalf are adhering to such controls.