In response to the Silent Ransom Group's physical offensive, we propose the 'Zero-Trust Physical' (ZTP) framework. ZTP extends the principles of digital zero-trust—'Never Trust, Always Verify'—to the physical office environment. Key components include: 1. **Identity-Linked Physical Access**: Integrating badge-swipe data with IT login events. If a user logs in from a workstation but their badge hasn't entered the building, an immediate lockout is triggered. 2. **Hardware-Backed MFA**: Moving away from SMS/Push to FIDO2 hardware keys that must be physically present in the machine to maintain a session. 3. **Automated Port Security**: Utilizing 802.1X to ensure that only managed devices can communicate on the wired network. 4. **Visual AI Surveillance**: Using existing security cameras to detect 'Unusual Proximity' to server racks or 'Tailgating' at secure entries, integrated directly into the SOC's alerting pipeline.