If the corresponding site access controls are insufficient, there is an increased risk that unauthorised persons may enter a data centre and cause unintentional (e.g. due to a lack of technical knowledge) or intentional damage. Attackers may thus extract sensitive data, steal devices, or manipulate servers, for example. Insufficient site access controls can therefore impact the availability, confidentiality, and integrity of data and IT components.