Remote Access Tools Expand OT Security Risks

A recent report from Claroty’s Team82 has revealed that 55% of operational technology (OT) environments use four or more remote access tools, which significantly increases the attack surface and operational complexity. These tools, many of which are non-enterprise-grade, often lack essential security features such as multi-factor authentication (MFA), auditing, and role-based access control. This has created cybersecurity risks for organizations, particularly in industries where remote access has expanded post-pandemic to manage employees and third-party vendors.

The report indicates that 79% of organizations use multiple low-security tools, which not only increases exposure but also adds operational costs. Tools like TeamViewer and AnyDesk, which have been involved in high-profile breaches, are among the culprits.

The Team82 report stresses that remote access tool sprawl adds both security and operational challenges, as organizations often have to manage up to 16 tools simultaneously. These tools often create gaps in identity management and security governance, making it difficult to monitor third-party access and protect OT networks from external threats.

To address these challenges, the report advises organizations to improve visibility into their OT networks, consolidate remote access tools, and enforce strict security requirements, particularly for third-party vendors. Centralized management and consistent policies are key to reducing security risks and operational inefficiencies caused by unmanaged remote access tools.

Source: Industrial Cyber

The European Cyber Intelligence Foundation is a nonprofit think tank specializing in intelligence and cybersecurity, offering consultancy services to government entities. To mitigate potential threats, it is important to implement additional cybersecurity measures with the help of a trusted partner like INFRA www.infrascan.net, or you can try yourself using check.website.