What is a break-glass account and why is it critical in OT security?

• A. A standard user account with no special privileges
• B. An emergency privileged access account used during incidents; tightly controlled, audited, and time-limited
• C. An outdated account no longer used
• D. A guest account used for visitors

Answer: (B)

A break-glass account is an emergency privileged access account used during incidents to quickly gain the elevated rights needed to restore operations or investigate faults. In OT security, rapid access to critical controls is often essential, but uncontrolled elevation is dangerous. The break-glass approach provides a controlled path: credentials are tightly managed and stored securely, access is justified and often requires multi-person approval, the session is time-limited, and every action is logged for audit. This balance—speed during emergencies with strong governance—lets responders act fast without sacrificing accountability or introducing unchecked risk. Standard user accounts lack privileges, outdated accounts pose security holes, and guest accounts don’t provide the necessary privileges, so they wouldn’t meet the needs of emergency, regulated environments.