Even if a well-functioning access control system is in place, unauthorised persons can enter a data centre if it is not adequately protected against intrusion. Offenders could then steal or manipulate IT components or obtain confidential information. They could also destroy devices or cause general damage to the data centre.