TL;DR: Manufacturers are accelerating Industry 4.0 while facing expanded attack surfaces, with Imprivata citing that 57% experienced ransomware in the past 12 months and that legacy OT assets still average more than 15 years old. Secure modernization now depends on stronger identity governance, shared-device controls, and continuous access monitoring rather than adding friction late in the workflow.
Editorial analysis by NHI Mgmt Group, based on content published by Imprivata: “Walking the tightrope: How manufacturers can balance digital transformation and cybersecurity”.
Key questions
Q: What breaks when manufacturers keep using shared shop-floor credentials?
A: Shared shop-floor credentials destroy accountability because every action looks like it came from the same identity.
Q: Why do legacy OT systems increase access risk in factories?
A: Legacy OT systems often lack modern logging, central authentication, and fine-grained access controls.
Q: How can manufacturers reduce friction without weakening security on the shop floor?
A: Use context-aware controls such as risk-based authentication, session rules and per-task access instead of forcing the same login burden on every action.
Practitioner guidance
- Eliminate shared floor credentials Assign unique identities for operators and shift workers, then preserve shared-device usability through fast re-authentication and session handoff rather than shared passwords.
- Inventory OT and vendor access paths Map every connected device, contractor path and vendor integration to the exact privileges it needs, including where access persists across shifts or sites.
- Apply risk-based authentication at access points Trigger stronger checks only when context changes, such as new devices, unusual locations, abnormal hours or high-risk sessions that touch production systems.
Bottom line: Manufacturing digital transformation expands identity risk when shared credentials, contractor access and legacy OT remain embedded in daily operations.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Manufacturing digital transformation fails when access governance is treated as a friction problem instead of a control boundary. The article shows that shop-floor teams will route around security that slows production, which means the real governance challenge is to make access decisions invisible when risk is normal and strict when risk changes. That is a workflow and identity design issue, not a user-behaviour complaint. Practitioners should treat access governance as part of industrial operations design, not a bolt-on security layer.
A question worth separating out:
Q: What should security teams review first in a manufacturing access programme?
A: Start with the access paths that touch shared devices, third-party contractors and legacy OT assets, because those areas combine weak traceability with high operational dependence. Then verify who can authenticate, what they can do and whether the access still matches current production needs. That sequence exposes the most likely governance gaps fastest.
👉 Read our full editorial: Manufacturing digital transformation needs tighter access control