I'm looking for actual specific standards that apply to physical access control for Information Security office space. Long story short, our retarded building manager wants an open office concept, and in order to argue this, my boss wants some specific standards. We have to meet NIST and PCI requirements, but we also model our corporate policy from COBIT.