OT / ICS · 6h ago

CISA and FBI Warn on ICS Integrator Access

CISA and the FBI published a fact sheet on third-party ICS integrators, warning critical infrastructure operators that contractor access can become a primary attack path into industrial environments. The guidance focuses on how integrator relationships create risk when access is broad, persistent, or loosely governed.

The mechanism is simple: integrators often need deep access to design, service, and sometimes run industrial control systems, so an over-privileged account can bypass normal perimeter assumptions. If that access is wider than the job requires, a trusted outside party can be used to reach sensitive control functions and create disruptive or destructive effects without first breaking the equipment itself.

For operators, the exposure sits in the relationship as much as in the gear. If your OT program relies on vendors for design, support, or daily operations, the remaining risk is whether contract terms, privilege boundaries, and access governance actually match the trust you have handed out.

Timeline

• Sep 24 Reported by Industrial Cyber
• Sep 23 Reported by CISA Advisories

Sources

2 sources covering this story

• Industrial Cyber Sep 24

  CISA, FBI warn critical infrastructure operators of third-party ICS risks, urge least privilege and remote access controls - Industrial Cyber

  CISA, FBI warn critical infrastructure operators of third-party ICS risks, urge least privilege and remote access controls

• CISA Advisories Sep 23

  Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators | CISA

  This fact sheet describes how critical infrastructure operators can work with third-party industrial control systems (ICS) integrators to help ensure secure practices and frameworks are in place to protect the operational environment.

Part of the PlainSec briefing for 2026-09-24

Editions

• Briefing for 2026-09-24