I’ve been to a DC and the entry criteria was appointment only and finger print scanning.
Plus supervise access, not ‘free roam’.

To me two-factor authentication sounds good and if they’re having security audits then that’s even better.

I’m not sure about those specific certifications though, that is perhaps a little out of my depth of knowledge.