Which access controls are essential for critical OT actions?

Which access controls are essential for critical OT actions?

• A. Open access for critical actions
• B. Single-person approval without verification
• C. Password-only control with no monitoring
• D. Least privilege with multi-person verification and periodic reviews

Answer: (D)

Strong, auditable access controls are essential for critical OT actions. Granting only the minimum rights needed to perform a job—least privilege—limits the potential damage if credentials are compromised and reduces the blast radius of any mistake. Requiring multi-person verification (dual control) adds a crucial check-and-balance: it prevents a single person from unilaterally approving dangerous or irreversible actions, reducing the risk of fraud, error, or sabotage. Periodic reviews keep access aligned with current roles and responsibilities, ensuring that permissions are revoked when they are no longer needed and that changes in staff or processes don’t leave gaps. Open access is unsafe because it provides no barriers or accountability. Single-person approval without verification lacks a cross-check, increasing the chance of accidental or intentional misuse. Password-only control with no monitoring offers no trail or visibility, making it easy to bypass or conceal improper actions. The combination of least privilege, multi-person verification, and regular reviews addresses both security and operational integrity in critical OT environments.

Strong, auditable access controls are essential for critical OT actions. Granting only the minimum rights needed to perform a job—least privilege—limits the potential damage if credentials are compromised and reduces the blast radius of any mistake. Requiring multi-person verification (dual control) adds a crucial check-and-balance: it prevents a single person from unilaterally approving dangerous or irreversible actions, reducing the risk of fraud, error, or sabotage. Periodic reviews keep access aligned with current roles and responsibilities, ensuring that permissions are revoked when they are no longer needed and that changes in staff or processes don’t leave gaps.

Open access is unsafe because it provides no barriers or accountability. Single-person approval without verification lacks a cross-check, increasing the chance of accidental or intentional misuse. Password-only control with no monitoring offers no trail or visibility, making it easy to bypass or conceal improper actions. The combination of least privilege, multi-person verification, and regular reviews addresses both security and operational integrity in critical OT environments.