Physical access attacks are no longer edge cases, they are a risk that organizations must actively plan for.