OT Cybersecurity Best Practices for SMBs: Identity and Access Management in OT
Summary: Dragos OT-CERT published a blog in its series on OT cybersecurity best practices for under-resourced organizations, covering Identity and Access Management and its four pillars: Identity Lifecycle Management, Access Control, Authentication and Authorization, and Identity Governance. The post describes applying these principles in OT environments, including assigning separate accounts to users, services, and groups and recommending logging and alerts when an interactive login is attempted for a service account.
Bottom line: Service accounts can hold access to critical applications and sensitive data, so an interactive login attempt against one is the kind of event the guidance says should trigger logging and alerts. The post also asks whether your risk assessment accounts for a cyber attack on a critical supplier and whether you could still produce your product or serve customers if one were hit.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026