Manufacturing Cybersecurity Risks from Governance Gaps and Dormant Accounts

Recent research from Pathlock reveals significant cybersecurity vulnerabilities in the manufacturing sector due to governance gaps and inadequate access control measures. Nearly 48% of manufacturers fail to revoke access within 24 hours of employee role changes or departures, creating opportunities for credential stuffing, password spraying, and phishing attacks. The study indicates that 46% of security incidents are linked to these governance gaps, particularly during digital transformation efforts. As organizations increasingly digitize their operations, reliance on manual controls has led to blind spots in security. One in five manufacturers has reported a security incident, with many stemming from dormant accounts tied to former employees. The findings suggest that insider risks are less about malicious intent and more about systemic weaknesses in governance frameworks. The urgency for improved access governance is underscored by the financial implications, as downtime in manufacturing can lead to significant losses.

Key Points: • 48% of manufacturers do not revoke access within 24 hours of role changes. • 46% of security incidents are linked to governance gaps from digital transformation. • One in five manufacturers has experienced a security incident in the past year.