The central thesis is simple: An air-gapped factory network is secure until a contractor’s infected USB drive (physical-social vector) is plugged into a maintenance terminal (digital vector). A smart building is efficient until a compromised HVAC system (IoT) provides a beachhead into the corporate HR database (cloud).