John is a new Chief Information Security Officer $($CISO$).$ As he is currently evaluating the state things within the organization. Throughout his evaluation he notes the following:

To get access to the server room, he must use his key card

There are various types of fire suppression systems throughout the building

There is a disaster recovery and business continuity plans in place

The network is segmented by department using VLANs

To access network resources, users have to provide multiple factors for authentication

Every user must sign an AUP before being allowed access to network resources

Which of the following are considered Physical Controls $($Select all that apply$)$

$1$

$2$

$3$

$4$

$5$

$6$