Topic starter
25/06/2026 12:04 am
TL;DR: Shared shop-floor credentials, contractor access and legacy OT are widening manufacturing identity risk, according to Imprivata. Access governance has to preserve production flow while restoring traceability and least privilege.
Editorial analysis by NHI Mgmt Group, based on content published by Imprivata: “Walking the tightrope: How manufacturers can balance digital transformation and cybersecurity”.
Key questions
Q: Why do legacy OT systems increase access risk in factories?
A: Legacy OT systems often lack modern logging, central authentication, and fine-grained access controls.
Q: How can manufacturers reduce friction without weakening security on the shop floor?
A: Use context-aware controls such as risk-based authentication, session rules and per-task access instead of forcing the same login burden on every action.
Q: What breaks when manufacturers keep using shared shop-floor credentials?
A: Shared shop-floor credentials destroy accountability because every action looks like it came from the same identity.
Practitioner guidance
- Eliminate shared floor credentials Assign unique identities for operators and shift workers, then preserve shared-device usability through fast re-authentication and session handoff rather than shared passwords.
- Inventory OT and vendor access paths Map every connected device, contractor path and vendor integration to the exact privileges it needs, including where access persists across shifts or sites.
- Apply risk-based authentication at access points Trigger stronger checks only when context changes, such as new devices, unusual locations, abnormal hours or high-risk sessions that touch production systems.
Bottom line: Manufacturing digital transformation expands identity risk when shared credentials, contractor access and legacy OT remain embedded in daily operations.
Glossary terms: Access Continuity Debt, Risk-Based Authentication, Intelligent Session Control, Shared-Device Access
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
25/06/2026 8:53 am
Manufacturing digital transformation fails when access governance is treated as a friction problem instead of a control boundary. The article shows that shop-floor teams will route around security that slows production, which means the real governance challenge is to make access decisions invisible when risk is normal and strict when risk changes. That is a workflow and identity design issue, not a user-behaviour complaint. Practitioners should treat access governance as part of industrial operations design, not a bolt-on security layer.
A question worth separating out:
Q: What should security teams review first in a manufacturing access programme?
A: Start with the access paths that touch shared devices, third-party contractors and legacy OT assets, because those areas combine weak traceability with high operational dependence. Then verify who can authenticate, what they can do and whether the access still matches current production needs. That sequence exposes the most likely governance gaps fastest.
👉 Read our full editorial: Manufacturing digital transformation needs tighter access control