# manufacturing

Source: https://startwithidentity.com/verticals/manufacturing/
Last updated: 2026-06-18
License: content by Start with Identity. Cite the source URL.

---

## The job identity does in manufacturing

Manufacturing identity is dominated by operational technology and connected equipment, layered on a global workforce and a deep supply chain. The hard problems are controlling privileged access to industrial control systems (ICS) and giving the growing fleet of connected machines, robots, and sensors trustworthy [machine identity](https://startwithidentity.com/guides/fundamentals/what-is-machine-identity/). Downtime is extraordinarily expensive, so controls must protect without disrupting production.

## The regulatory and compliance floor

IEC 62443 is the central standard for industrial control system security, the NIST Cybersecurity Framework guides US practice, and [NIS2](https://startwithidentity.com/guides/compliance/identity-controls-for-nis2/) raises obligations for important and essential entities in the EU. Increasingly these expectations arrive contractually through customers and insurers, not just regulators.

## The threat landscape here

Ransomware that halts production is the nightmare scenario, and it usually enters through stolen credentials and flat networks that let IT compromise reach the plant floor. Unmanaged machine identities and expired certificates cause both security incidents and unplanned downtime. Vendor and contractor access is a frequent entry point.

## What good looks like

- [PAM](https://startwithidentity.com/vendors/pam/) for OT and IT with vaulting, session control, and [just-in-time](https://startwithidentity.com/guides/implementation/zero-standing-privileges-rollout/) access to plant systems.
- [PKI and certificate lifecycle](https://startwithidentity.com/vendors/pki/) for connected equipment and workloads, automated end to end.
- Federated [workforce IAM](https://startwithidentity.com/vendors/iam/) with governed supplier and contractor access.
- Segmentation so an IT compromise cannot reach the plant floor.

## Vendors and fit

Privileged access fits [CyberArk](https://startwithidentity.com/vendors/pam/cyberark/) and peers; workforce identity fits [Microsoft Entra](https://startwithidentity.com/vendors/iam/microsoft-entra/) or [Okta](https://startwithidentity.com/vendors/iam/okta/); machine and device PKI fits [Keyfactor](https://startwithidentity.com/vendors/pki/keyfactor/) and the [PKI](https://startwithidentity.com/vendors/pki/) category.

## Common pitfalls

- Flat networks where a compromised vendor or workstation reaches the plant floor.
- Unmanaged machine identities and expired certificates causing risk and downtime.
- Supplier and contractor access granted broadly and never reviewed.

## Where it is heading

Smart-factory and IIoT growth will make machine identity and certificate automation central, while NIS2 and ransomware pressure push OT privileged access into formal programs.