Yes That seems reasonable. Physical security is the first step in most security plans. Not much point worrying about your password policy if someone can just walk off with your hard drive.