One of the most common exceptions to best practice is operators in the control center share an operator account. In fact, they do not login or logout out at all. The main reason for this is operators cannot risk losing access to the HMI for even a few second or minutes it takes to login [...]

Loyal readers of this blog know I’m a huge proponent of strong, two-factor authentication solutions to prevent all the vulnerabilities in password authentication. Two factor is based on having two of the three factors:
- something you know (a password)
- something you have (a token or smartcard)
- something you are (a fingerprint)
At Distributech I came across [...]