A Matter of Trust: Remote Access for ICS
Summary: Dragos notes that OT systems were retrofitted with remote monitoring and access to cut the cost and coordination burden of on-site support, and that many organizations learned in the early 2000s that cybersecurity had to be built in rather than bolted on. The post describes ICS as a hard shell with a gooey center under the M&M model, since these devices were designed to accept commands from engineers and often cannot track logins or enforce complex passwords.
What's compelling: Remote access by definition penetrates the hard shell to reach the gooey center, so every new connection is a gate through the perimeter - and Dragos warns that free remote access tools should never simply be downloaded from the internet and installed in the control system environment.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026