Secure the vendor session
Define an approved maintenance route with scoped access and an explicit expiry.
By Abdul Khadir Mahamed · Updated 3 November 2026
Independent guided exercise using synthetic evidence. No live industrial systems are connected.
Your scenario
A packaging equipment supplier needs two hours of access to one engineering workstation.
Evidence to examine
Request: patch HMI project Target: ENG-01 Window: 14:00–16:00 site time Route: access broker → jump host → ENG-01 PLC programming: outside approved scope
Your investigation tasks
- Define authentication, approval, target, and session expiry.
- Specify the logs required to reconstruct the session.
- Explain how emergency termination and post-maintenance review work.
Debrief
Review the reasoning after completing the tasks
Use named identity, MFA, approved access scope and a time-bound entitlement. Record broker and jump-host activity, target logons, and approved changes. Validate the access revokes at expiry. Do not grant PLC programming rights merely because the vendor can reach ENG-01.
Take it back to the process
Separate observed facts from assumptions. Explain the operational consequence of your decision, name the evidence still needed, and identify who must approve or validate a real-world change.