Once upon a time as an OT network manager, I was tasked with conducting an audit at a site deep in a West Virginia hollow. My only information was a street address, a gate code, and the expectation of finding our equipment.
Upon arrival that evening, the given address led to... well, nothing. No numbers on any buildings, and Google Maps was pointing to an empty spot. After some searching, I found a locked gate leading to a yard with equipment that looked like ours. No company signage, but there was a gate and a hefty combination lock. Promising, right?
I parked my work truck and approached the gate, ready to punch in the code. Except, it didn't work. Try as I might, the lock wouldn't budge.
Just as I was about to call it a night, another truck pulled up. A friendly guy hopped out, greeted me, and casually mentioned, "Oh yeah, they changed that gate code. Here's the new one." He rattled it off, I thanked him, asked for a pointer towards the data room, and let myself in, carefully locking the gate behind me.
I located the data room, plugged into a switch, and attempted to log in. My credentials failed. Again. And again.
It was then, glancing around the room, that I spotted a company memo on a table. The logo and company name on it were decidedly not mine.
My heart skipped a beat. I had just been given access to, and had walked right into, a completely different company's facility! I unplugged, skedaddled out of there as quickly and quietly as possible, and meticulously re-locked their gate.
While my technical access was (thankfully) thwarted by correct network security, this experience was a stark reminder: bypassing physical security can sometimes be alarmingly straightforward, often relying more on social engineering or simple human error (or, in this case, mistaken helpfulness!) than any complex technical exploit.
It really drives home the point that a holistic security posture must give physical security the serious attention it deserves. Sometimes the easiest way in is simply walking through the front (or back) gate!