means the securing of information and its storage media from physical, attack--for instance by someone entering a building to access papers, storage media, or computers. Discarded material, if not disposed of securely, may be a security risk. Even shredded documents and erased magnetic media might be reconstructed with sufficient effort.

If plaintext is stored in a computer file, the storage media, the computer and its components, and all backups must be secure.