Back to articles
Best PracticesJanuary 15, 2025 · 6 min readFree Member
MFA everywhere: a practical rollout for manufacturers
Multi-factor authentication stops most credential attacks — if you can actually deploy it on a factory.
By CSAFI Research · Threat Research Team

Stolen passwords are behind a huge share of intrusions, and multi-factor authentication is the single most effective control against them. The hard part in manufacturing is not the technology; it is the shared terminals, the gloved hands, and the vendor accounts.
A workable rollout starts with the crown jewels — remote access, email, and admin accounts — then moves outward. For shared floor terminals, badge-tap or hardware tokens beat phone apps.
Done in phases, with the awkward cases planned for rather than ignored, MFA everywhere is achievable. And it closes the door most attackers walk through.
Sectors
MeatRetail Processing & ManufacturingFood Logistics & Warehousing