Waste material is often a large attack vector. Internally,
you will find confidentiality bins that are easy targets to remove data from.
Likewise, outside of buildings,
it's possible to find shredded data, an easy enough puzzle to put
back together if one has the time. Your job as a specialized
attacker is to help the client understand their baseline security
posture of their company, whether it's digital,
physical or human. The human factor cannot be emphasized enough.
None of the attacks could have taken place without an untrained
individual either installing security devices incorrectly or helping
you circumvent them without questioning you.