You see far-fetched Hollywood examples of the most unlikely scenario's resulting in a data breach due to a lack of physical security. An example is in Mr Robot where the protagonist gets into a data warehouse and plants a rogue Raspberry Pi to destroy all the data. While unlikely all the conditions that occurred would happen...they could. Due to that almost all security standards and frameworks have large sections on physical security policies.
I'm currently dealing with an argument where the risk is 1 in a million that the 4am milk lady who delivers without supervision to the fridges walks past the server closet that has been left open and decided to plug in a rogue device.
While yes its laughable it would happen...it could. More so I see the risk in 10 years time where the milk lady is replaced with someone more motivated and process has not changed. Both the server closet being open, and unsupervised guests to particular area's are large risks.
But to executives it just seems too movie-esque for the them to take it seriously. Is there any large corporation breaches due to a lapse in physical security that could be used as supporting evidence to justify the case for improvement?