When to be physical, when to be cyber