#Cybersecurity #Denmark #Copenhagen #Remote Access #Secomea

Strengthening Governance in Operational Technology (OT) Remote Access

As the manufacturing sector adapts to a heightened threat landscape, companies are focusing on enhancing their cybersecurity measures, particularly in Operational Technology (OT) environments. Recent insights from Secomea highlight a critical gap in governance regarding third-party access to these systems, even as remote access capabilities have been fortified.

The Current Landscape of Cyber Threats

The landscape of industrial operations is under constant threat from cyberattacks, particularly ransomware incidents that specifically target OT systems. Manufacturers and their service providers, including machine builders and maintenance teams, crucially depend on secure remote access to maintain production efficiency. However, as organizations diversify their vendor ecosystems, the challenge has shifted from simply enabling secure access to implementing robust governance frameworks that dictate who can access these systems, for what purpose, and for how long.

Knud Kegel, CTPO at Secomea, emphasizes that while securing these connections has been a priority, establishing who has permission and monitoring these interactions is now just as important, if not more so. “Manufacturers don't need fewer vendors; they need better governance of vendor access,” Kegel states, pointing to the growing need for transparency and control in these interactions.

Auditability and Vendor Management

A notable study, the State of Industrial Remote Access 2026, reveals that 57% of North American organizations manage multiple external vendors with remote access capabilities into their OT environments. Yet, less than half—46%—report having full audit trails for vendor sessions, and a minuscule 23% conduct monthly reviews of vendor credentials. This data underscores the precarious situation many manufacturers find themselves in, where they may lack visibility into who is accessing their systems at any given time.

The Need for Shared Governance Models

The research conducted by Secomea finds that organizations that share responsibility for remote access governance between IT and OT functions report fewer incidents than those that allocate this responsibility to only one department. This finding underscores the importance of collaborative governance that encompasses both technological solutions and organizational oversight.

Essential Strategies for Effective Governance

Secomea advocates for several best practices that manufacturers should consider to enhance their remote access governance:

• - Identity-based access: Implement access controls that are dependent on individual vendor identities, ensuring accountability.
• - Just-in-time access: Instead of maintaining persistent remote connections, vendors should have access for only the duration necessary to complete tasks.
• - Centralized approval workflows: Facilitate smooth operations through unified processes that span across IT and OT.
• - Comprehensive audit trails: Maintain detailed records of every remote session to monitor for compliance and security purposes.
• - Regular credential reviews: Automate access revocation processes to ensure that former vendors do not retain unnecessary access.
• - Incident response protocols: Enable the quick suspension of access during any cyber incident to mitigate potential damages.

The Future of Remote Access Governance

Looking ahead, the manufacturing sector appears poised to shift away from fragmented access solutions, such as multiple VPNs and various vendor-specific tools. Over 75% of North American organizations are in favor of a standardized platform to manage vendor access, indicating a move towards more centralized governance models.

Ultimately, the key to resilience in manufacturing is not merely enhancing remote access capabilities but also ensuring that access is managed intelligently. Manufacturers that can strike this balance will not only safeguard their operations but also facilitate seamless collaboration with trusted partners.

Conclusion

In an era where the threat of cyberattacks looms large, the way manufacturers govern third-party access to operational technology will dictate their capacity for sustained operational continuity and resilience. As firms continue to tackle these challenges, a proactive approach to governance, surveillance, and collaborative responsibility will be crucial in maintaining robust and secure industrial operations.

For a more in-depth analysis, refer to Secomea's complete findings in the State of Industrial Remote Access 2026 report, which delves into these governance issues, vendor access management, and the implementation of Zero Trust principles across the manufacturing ecosystem.