From protecting the data centre building to securing the firmware, an integrated effort to mitigate risks is important.