Physical threats rank alongside cybersecurity for many US businesses