Physical proximity creates shared vulnerability. In any system where resources are pooled, an isolated threat against one tenant immediately becomes a crisis for all of them.

On February 4, 2006, protestors in Damascus firebombed the Danish embassy to denounce the publication of cartoons depicting the Prophet Muhammad. The Norwegian embassy was also burned during the unrest. The Chilean and Swedish embassies in Damascus were firebombed as well, as a consequence of sharing the same building as the Danish embassy.

How co-location forces organizations to share threat models

For builders and operators, efficiency often drives the decision to share infrastructure. Office space, server racks, and logistics hubs are divided among multiple parties to reduce overhead. Yet this efficiency masks a hidden cost. The Swedish and Chilean diplomatic missions did not publish the contested material, but sharing a building with the Danish mission meant sharing its exposure.

The Swedish Embassy in Damascus was subjected to damage, Laila Freivalds made a statement on the fire at the Embassy in Damascus, and there were protests against the cartoons of the Prophet Muhammad. The Danish Ministry of Foreign Affairs reported that the embassy staff left Syria temporarily.

The ministry's homepage also listed a media contact in connection with the drawings of the Prophet Mohammad. On February 7, 2006, Danish Minister of Foreign Affairs Per Stig Møller delivered a statement at a press conference in Copenhagen.

When designing systems, risk cannot be calculated in a vacuum. True isolation requires more than just organizational independence; it requires physical decoupling from the threat models of your neighbors.

Sources