OT identity and access: what cybersecurity awareness still misses

TL;DR: Operational systems are now business continuity and safety systems, yet awareness programmes often leave them outside traditional cybersecurity training, creating a gap between cyber risk and plant-floor reality, according to Corsha. The governance issue is not awareness alone but whether teams can secure machine connections and access without adding operational friction.

Editorial analysis by NHI Mgmt Group, based on content published by Corsha: “title”.

Key questions

Q: What breaks when shared credentials are used for OT maintenance sessions?

A: Shared credentials break accountability and make privilege control difficult to enforce.

Q: Why do OT environments need identity governance instead of awareness alone?

A: Awareness changes behaviour, but it does not control machine connections, vendor pathways or standing access.

Q: How can teams tell whether OT cybersecurity awareness is actually working?

A: It is working only if operators can keep production moving while access becomes more attributable, time-bound and reviewable.

Practitioner guidance

• Define OT identities and access paths Inventory every machine connection, vendor link and operational account that can affect production or safety, then assign an owner and purpose to each one.
• Retire shared floor logins Replace shared credentials on the plant floor with attributable accounts or managed credentials so every action can be traced back to a specific identity.
• Schedule vendor access instead of leaving it open Time-bound external access to engineering workstations, maintenance tools and control systems so access exists only during the approved task window.

Bottom line: OT cyber awareness falls short when it ignores machine identities and plant-floor access patterns.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →