A warehouse doesn't keep office hours. Trucks arrive overnight, pickers work second and third shift, and the loads that have to be in Denver by Monday morning get staged on Saturday. But at most small and mid-sized logistics operations, the IT support behind all of it runs Monday through Friday, nine to five.

A law firm's trust account holds money that belongs to someone else. Settlement proceeds waiting to disburse, retainers not yet earned, closing funds in transit. That's exactly what makes it the most attractive target in the building, and fraudsters have learned that the fastest way into it runs through the firm's email.

A property management company or an HOA runs on more connected equipment than most of its managers could list. Smart locks on unit doors and amenity spaces, cameras at entrances and pools, gate controllers, video intercoms, package lockers, thermostats and HVAC controls, irrigation timers, leak sensors.

Cargo theft used to mean a cut lock and a missing trailer. Now it’s possible without any physical break-in. Fraudsters use stolen carrier credentials, spoofed email addresses, and fake broker identities to book loading, redirect freight, and disappear with shipments that were given to them willingly.

In many practices, HIPAA compliance exists on a shelf until a reason to open it presents itself, usually in the form of an audit notice, a patient complaint, or a breach. Over the years, the policy ages into something that few recognize. The staff has turned over, the software has changed, and the policies no longer match how the office actually runs.

There was a stretch where the industry assumed checks were on their way out and check fraud with them. The opposite happened. Check fraud has surged to levels that have regulators and financial institutions treating it as a top concern again, alongside a wave of payment scams that use email, text, and the phone to talk people out of their money.

A manufacturer's value is in more than the machines on the floor. It's in the CAD files, the tooling specifications, the proprietary processes, and the product designs that took years and real money to develop. The same is true for an architecture or engineering firm, where the drawings, models, and specifications are the product.

A financial firm can replace a server. It can recover from a fraudulent wire transfer. It can rebuild a network, restore data from backup, and absorb a fine. What it can't easily do is win back a client who decided the firm could no longer be trusted with their money.

Ask a plant manager what keeps them up at night and the answer is rarely a data breach in the abstract. It's the line going down. A stopped line means idle workers still on the clock, orders that won't ship, customers who start asking questions, and a recovery clock that runs whether the cause was a failed server, a ransomware lockout, or a design system that won't open.

The laptop at the front desk gets updates. The billing workstation gets updates. The server in the closet gets updated, more or less on schedule. But the ultrasound unit, the digital X-ray system, the infusion pump, the connected vitals monitor, the lab analyzer feeding results into the EHR? Those were installed years ago, but no one has touched their software since the day the vendor set them up.