Cyber Risks · Dragos Blog

OT Cybersecurity Best Practices for SMBs: Providing Third Party Access to the Operational Technology (OT) Network

Summary: Dragos OT-CERT's monthly best-practices blog for under-resourced organizations addresses how vendors should access and transfer files to an OT network when they come onsite, offering two separate practices - one for network access and one for file transfer. The post frames this within supply chain risk, asking whether a company's risk assessment accounts for a cyber attack on a critical supplier and whether it could still produce its product or serve customers.

Why it matters: The question posed is whether your risk assessment covers an attack on a critical supplier and whether you could still produce your product or serve customers - a stake that lands hardest on SMBs whose OT environments lack in-house security expertise.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026