Recommendations to Implement Secure Remote Access (SRA) in OT Environments
Summary: Dragos recommends that organizations implementing secure remote access in OT environments build on existing IT identity and access management, segment IT, DMZ, and ICS networks with separate IP schemes, place jump hosts in a DMZ, and require multi-factor authentication for remote sessions. The article notes that SANS lists Secure Remote Access as one of its Five Critical Controls for ICS/OT security, and that shared credentials across IT and OT systems give adversaries a path to the most critical industrial systems.
Why it matters: Some OEM vendors have installed their own remote access tools in customer ICS/OT networks that bypass the organization's security controls, and without session auditing an adversary can remote in at odd hours or for extended periods and never be caught.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026