A vendor engineer's laptop has both internet reach and a path to the controllers. Why is an engineering workstation such an attractive pivot for adversaries?
- A.It stores the plant drawings plus the batch recipes
- B.It hosts the field sensors of the plant safety system
- C.It relays alarms to a public cloud analytics service
- D.It holds project files plus rights to program controllers
Why D is correct
Engineering workstations contain controller projects and the software and credentials to download logic, so compromising one gives a path to change process behavior. They do not hold finance data, host field sensors, or act as public alarm relays.
Know someone studying for OT Security Fundamentals? Send them this one.