If you don't have physical security you don't have security.

The most successful attacks come from within. The "temp" that social engineers himself to others accounts. The disgruntled employee that "repo modes" 100 cars thru onstar. The server room that overheats. The overloaded electrical service.

Those are the "hacks" that most companies won't even admit.