In tiny companies, physical layout issues may not be a problem. However, risk factors such as building size, employees number, entries number, servers location or confidential information must be taken into account in the absence of information leakage.