For many reasons, attackers may try to manipulate or destroy IT systems, accessories, and other storage media. The later the attacks are detected by employees or the organisation in question, the greater the knowledge acquired by the perpetrators, the more far-reaching the impact on the corresponding work procedure, and the more effective the attacks will be. For example, sensitive employee data could be viewed without permission. Storage media or IT systems could also be destroyed. This may result in significant downtime and process limitations.