Latest / Cybersecurity Under Pressure. Real Attacks, Real Lessons
Third-party ICS Access Is an Operational Trust Boundary, Not a VPN Problem
A vendor VPN can establish connectivity, but it does not define what a third party may change inside an industrial control system. This episode examines the operational trust boundary around external maintenance: who authorizes the work, how the session is scoped, what happens at the engineering workstation and how access ends without leaving standing authority over production.
Related CUP episodes:
The Token That Bypassed the Jump Host
The Trap of the Trusted Engineering Session
Engineer the Path, Not Just the Perimeter
Exposed Paths in OT Networks
When Maintenance Becomes the Weapon: The…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.