Why is heating, ventilation, and air-conditioning (HVAC) part of organizational security planning?

HVAC systems are an important part of the availability of systems and infrastructure. They are also a target for attackers who target the Internet of Things (IoT) or network-connected devices. They are not frequent targets for use in social engineering efforts, although they could be used that way. They are not a primary line of defense for organizations.