Do you have a Physical Security Policy for your business? If access to where your server area isn't secure, then someone can potentially take your data the old-fashioned way – walking out with it.
