Quick Takeaways
-
Dispel launched Zero Trust Engine for OEMs, a remote-service platform already proven at scale, including through ABB Care.
-
It replaces risky, fragmented access—such as standing VPNs, shared credentials and customer-specific tools—with session-based access, MFA, automatic recording and real-time visibility.
-
The platform helps OEMs meet customer security demands with risk scoring, verified technician identity and continuous compliance support for frameworks including NERC CIP, IEC 62443 and NIS2.
- Available as SaaS or a white-labeled OEM platform, it supports multi-tenant, dedicated and on-premise/hybrid deployments; Dispel says sites can be deployed in under an hour and scaled without re-platforming.
Problem Explained
Dispel has launched the Zero Trust Engine for OEMs, a platform for original equipment manufacturers and machine builders that remotely service industrial customers’ equipment. It brings customer access methods, technician permissions, session recording, and compliance tools into one system. Dispel says the platform replaces standing VPNs and scattered customer-specific tools with temporary, controlled connections. It is already used at multiple OEMs, including ABB through ABB Care. ABB’s Global Head of Service, Charles Bennett, said the technology supports faster service and secure remote delivery.
The launch responds to growing security and operational pressures. Remote access can expose manufacturers to risk, while fragmented tools, shared credentials, slow approvals, and incomplete records can hinder service and complicate security reviews. Verizon’s 2026 Data Breach Investigations Report says third parties were involved in 61 percent of manufacturer breaches. Dispel says its platform is designed to help OEMs provide consistent service while meeting different customer requirements. The announcement was reported by Industrial Cyber, which published the post describing the launch.
Critical Concerns
This issue can affect any business that relies on vendors, OEMs, or technicians to access systems remotely. Without consistent, verified access controls, a compromised account or poorly managed connection can expose operational technology, sensitive data, and intellectual property. As a result, attackers may disrupt production, delay service, or trigger costly recovery. Meanwhile, inconsistent access records can make audits and compliance harder. Even a brief outage can mean lost revenue, missed commitments, and reduced customer confidence. A zero-trust approach helps limit access to the right people, systems, and tasks—thereby reducing exposure and improving oversight.
Possible Actions
Timely remediation reduces the risk that compromised or misconfigured remote access could disrupt industrial operations or expose sensitive systems.
Remediation Steps
- Inventory Dispel deployments, connected OT assets, OEM accounts, and remote-access paths; prioritize internet-exposed or operationally critical systems.
- Review configurations and vendor advisories; promptly apply approved updates and security fixes, testing changes before production rollout.
- Disable unused accounts and access routes. Require MFA, named accounts, least privilege, and time-limited access for service sessions.
- Restrict connections through approved gateways, device allowlists, and OT network segmentation; prevent direct access to control systems where feasible.
- Rotate credentials, keys, and certificates that are expired, shared, or potentially exposed.
- Enable centralized logging and alerting for authentication, configuration changes, and remote sessions; investigate unusual activity.
- Validate access controls after remediation, retain evidence for compliance, and update incident-response and recovery procedures.
Continue Your Cyber Journey
Discover cutting-edge developments in Emerging Tech and industry Insights.
Access world-class cyber research and guidance from IEEE.
Disclaimer: The information provided may not always be accurate or up to date. Please do your own research, as the cybersecurity landscape evolves rapidly. Intended for secondary references purposes only.
Cyberattacks-V1
