Yeah this is a great point, you gotta figure that armored trucks, banks, military stuff, they all have functional physical access control, clearly defined risks

Yeah this is a great point, you gotta figure that armored trucks, banks, military stuff, they all have functional physical access control, clearly defined risks, established value, etc. The person wheeling the dolly full of cash and the driver of the truck... well you know those two people are going to be handling bulk cash. The MP guarding the nukes is standing at the checkpoint. Check em' because you can just move on to the next person. But in the corporate world, theres gotta be huge variance, but so many don't give a flying flamingo who's scoping out what, unless somebody is forcing the issue (and also auditing and reporting to the compliance department, whatever thats for). They know the people in the NOC/SOC, the C-suite has equity, there may be physical access control, cameras and proxcards out the wazoo, but when Marge from bizdev needs those emails for the marketing newsletter or whatever, she is gonna get them immediately and hand them right over to the intern or vendor or Doug, whatever his job is. For all the obscene value that the data and access represents, its encrypted, right? What could go wrong? Want to background check the sales people? But... look at this guy's resume! He's only asking 80% of the market rate! These dialysis machines sure won't renew their support contract by themselves. Best case scenario is that the costs mount even higher into the stratosphere and people start demanding a second look. It's been a while, Maersk, JP Morgan, TransUnion, Colonial Pipeline, Beef, Hospitals, Schools, the OPM (for god's sake...) billions or trillions of dollars. It doesn't seem to be a priority.