OT systems cannot be decrypted once infected, making recovery impossible.

Ransomware demands are always higher when OT systems are targeted.

OT systems cannot be easily taken offline, so when they become encrypted, physical operations and critical services come to a halt.

Ransomware spreads faster across OT networks due to the use of industrial protocols.

Provide the vendor with permanent VPN credentials to avoid delays during future incidents.

Deny all remote access and require the vendor to perform all diagnostics on-site.

Allow the vendor to connect directly using their own remote access tools for speed and convenience. 

Grant the vendor a secure, time-limited, monitored remote access session using multi-factor authentication (MFA), then revoke their access after they complete the task.