Compromise of the remote management platform

The monitoring and remote management platform has administrative reach into the workstations and servers of customers. An attacker who took over its console could push software or commands to every managed device. Engineers and the service desk use the console every day.

Measures

Console access needs multi-factor authentication with a hardware security key, and the console can be reached only from the management network. A software push to all customers needs the approval of a second engineer.