If the site and system access controls for the components of a storage system are insufficient or simply not in place in an organisation, it is possible for an attacker to gain physical access to existing switches or to connect additional FC-SAN switches to the network. The attacker may be seeking to access the distributed zoning database in order to change it and gain access to storage systems.