Mike brings up a good point, but one I've run into many times in the past. Over the last 20+ years in IT, I have seen many clients put in secure doors, bullet proof glass, entrance cameras, etc.. but still they ignore the obvious.
We were consulting for a large client about 4 years back doing their networks when they asked us to help design their new server room. A good deal of money was put into power, climate control, security door, etc.. However, they only had sheetrock walls that ended at the drop ceiling. We tried to emphasize this at one point by easily getting into the server room by going up and over in 30 seconds. The fix would have been easy using a sandwiched wall board going all the way upto the floor above the drop ceiling and would have possibly added 1% to the total construction cost, but they still ignored it.
Most clients we run into are more interested in perception. If it looks secure, than people will think its secure and leave it alone. If not, well than that's what insurance is for.
Speaking about hot-sites, however, I can't speak for the other players in the market, but we maintain a small hot-site for our clients with 30 seats about a good size data center. Being a long-term and seasoned Voice & Data company, we practice what we preach with Security and best practices. You can't cut corners on security.
Mark Hicks
Mathe, Inc.