--- title: Strategies for Securing Remote Access for Critical Infrastructure description: Key takeaways from the Oldsmar, Florida water treatment hack. image: https://blog.softwarfare.com/hubfs/Blog%20Images/Aerial%20View%20of%20The%20Solid%20Contact%20Clarifier%20Tank%20Type%20Sludge%20Recirculation%20in%20Water%20Treatment%20Plant_262x175.jpg --- [Skip to main content](https://blog.softwarfare.com/strategies-for-securing-remote-access-for-critical-infrastructure#main) [![SOFTwarfare Hi-Res Logo Black](https://blog.softwarfare.com/hs-fs/hubfs/SOFTwarfare%20Hi-Res%20Logo%20Black.png?width=150&height=50&name=SOFTwarfare%20Hi-Res%20Logo%20Black.png) ![SOFTwarfare Logo](https://blog.softwarfare.com/hs-fs/hubfs/SWF%20Logos/swf_logo_white.png?width=140&height=50&name=swf_logo_white.png) ![SOFTwarfare Hi-Res Logo Black](https://blog.softwarfare.com/hs-fs/hubfs/SOFTwarfare%20Hi-Res%20Logo%20Black.png?width=105&height=35&name=SOFTwarfare%20Hi-Res%20Logo%20Black.png) ![SOFTwarfare Logo](https://blog.softwarfare.com/hs-fs/hubfs/SWF%20Logos/swf_logo_white.png?width=150&height=54&name=swf_logo_white.png)](https://www.softwarfare.com) - [Platform](https://www.softwarfare.com/zero-trust-identity) - Show submenu for Use Cases Use Cases - [Passwordless Authentication](https://www.softwarfare.com/passwordless-authentication) - [Desktop Login](https://www.softwarfare.com/desktop-login) - [Single Sign On (SSO)](https://www.softwarfare.com/single-sign-on--sso) - [Privileged Access](https://www.softwarfare.com/privileged-access) - [Secured Integration](https://www.softwarfare.com/secured-integration) - Show submenu for Enterprise Enterprise - [Verticals](https://www.softwarfare.com/verticals) - [Resources](https://www.softwarfare.com/resources) - [Defense](https://www.softwarfare.com/defense) - Show submenu for Company Company - [About Us](https://www.softwarfare.com/about-us) - [Blog](https://blog.softwarfare.com) - [Partners](https://www.softwarfare.com/partners) Open main navigation Close main navigation - [Platform](https://www.softwarfare.com/zero-trust-identity) - Show submenu for Use Cases Use Cases - Use Cases - [Passwordless Authentication](https://www.softwarfare.com/passwordless-authentication) - [Desktop Login](https://www.softwarfare.com/desktop-login) - [Single Sign On (SSO)](https://www.softwarfare.com/single-sign-on--sso) - [Privileged Access](https://www.softwarfare.com/privileged-access) - [Secured Integration](https://www.softwarfare.com/secured-integration) - Show submenu for Enterprise Enterprise - Enterprise - [Verticals](https://www.softwarfare.com/verticals) - [Resources](https://www.softwarfare.com/resources) - [Defense](https://www.softwarfare.com/defense) - Show submenu for Company Company - Company - [About Us](https://www.softwarfare.com/about-us) - [Blog](https://blog.softwarfare.com) - [Partners](https://www.softwarfare.com/partners) - [See a Demo](https://www.softwarfare.com/demo) - - - [See a Demo](https://www.softwarfare.com/demo) # Strategies for Securing Remote Access for Critical Infrastructure by [SOFTwarfare Staff](https://blog.softwarfare.com/author/softwarfare-staff) Feb 18, 2024, 11:55:13 AM Another day, another near-catastrophic hack. This time, the target was a water treatment facility in Oldsmar, FL, a key part of the region’s infrastructure. While attempted attacks of the public infrastructure sector are nothing new, the methods by which this breach was conducted are raising alarms among cybersecurity experts. #### What Happened? A nefarious person or group gained remote access to the system that controls chemical levels in local drinking water and increased the level of sodium hydroxide by 10,900%. Thankfully, the treatment facility was able to regain control and prevent the chemicals from reaching the water supply, but the situation has sounded alarms across the industry. Speaking to Data Breach Today, Mike Hamilton, the CISO of CI Security and former member of the Department of Homeland Security, highlights a key takeaway from this hack: "The lesson to be learned here is that public sector organizations that provide critical services - which are largely unregulated for security - need some scrutiny on their IT and OT security." #### Lessons to Be Learned from This Hack When enabling a remote workforce, especially in a critical infrastructure sector, security must be top of mind in order to protect critical operations and equipment, proprietary data, sensitive information and, in extreme cases such as this, the safety of citizens. While most workers involved with industrial processes of critical infrastructure organizations are still working on-site, many administrative job functions have become remote positions which can still expose organizations to risk. In fact, the Cybersecurity Infrastructure and Security Agency, along with the NSA, issued updated critical infrastructure security recommendations in July 2020, including limiting or eliminating remote access. According to the recommendations, "Remote connectivity to OT networks and devices provides a known path that can be exploited by cyber actors. External exposure should be reduced as much as possible." In a statement that now can be viewed as ominous foreshadowing, Vectra’s Hitesh Sheth also states “We've seen enough breaches of the U.S. power grid, water systems and even nuclear plants to conclude this: Protecting these critical facilities and upgrading their cyber defenses should be a far higher priority." So, what can be done? At SOFTwarfare, we recommend three concrete steps that can be taken to prevent similar attacks: 1. **Use a more stringent methods**, such as Biometric Authentication, to secure remote access 2. **Deploy a least privileged access model**, granting access on an as-needed basis for each resource, system, and network 3. **Secure cybersecurity workflows** for mission critical operations with Biometric Authentication The breach that occurred at Oldsmar’s water treatment facility further underscores the urgency of securing critical infrastructure. Had this attack not been caught, thousands of lives would have been in jeopardy. It’s time that we eliminate the risks that can lead to inconceivable danger. Discover [SOFTwarfare's biometric authentication](https://www.softwarfare.com/biothenticate) capabilities and how we can secure remote access by [contacting our representatives](https://www.softwarfare.com/contact) today. **Tags:** [authentication,](https://blog.softwarfare.com/tag/authentication) [data breach,](https://blog.softwarfare.com/tag/data-breach) [cybersecurity](https://blog.softwarfare.com/tag/cybersecurity) ### Related Articles ##### [![Identity as the Control Plane](https://blog.softwarfare.com/hs-fs/hubfs/Identity%20Signals%20Graphic%20V1-1.png?width=520&height=294&name=Identity%20Signals%20Graphic%20V1-1.png) authentication • Apr 15, 2026, 10:29:19 AM Identity as the Control Plane 2 min read](https://blog.softwarfare.com/identity-as-the-control-plane) ##### [![Beyond the Proxy: The Session Hijack Reality](https://blog.softwarfare.com/hs-fs/hubfs/Social%20Image%202.25.26.jpg?width=520&height=294&name=Social%20Image%202.25.26.jpg) authentication • Feb 25, 2026, 8:00:02 AM Beyond the Proxy: The Session Hijack Reality 2 min read](https://blog.softwarfare.com/beyond-the-proxy) ##### [![The Holiday Dwell Time Trap: Why Identity is the MSSP’s Best Skeleton Crew](https://blog.softwarfare.com/hs-fs/hubfs/Blog%2012.23.25.png?width=520&height=294&name=Blog%2012.23.25.png) authentication • Dec 23, 2025, 10:40:57 AM The Holiday Dwell Time Trap: Why Identity is the MSSP’s Best Skeleton Crew 2 min read](https://blog.softwarfare.com/the-holiday-dwell-time-trap) ### Subscribe to the Blog Get SOFTwarfare's latest research and insights delivered to your inbox. ###### Categories ###### Recent Posts - [SOFTwarfare Launches on Google Cloud Marketplace, Expands Public Sector Reach With Carahsoft](https://blog.softwarfare.com/softwarfare-launches-on-google-cloud-marketplace-expands-public-sector-reach-with-carahsoft) - [The Vanguard of Identity: Securing the Warfighter in the Age of Agentic Chaos](https://blog.softwarfare.com/the-vanguard-of-identity) - [Identity as the Control Plane](https://blog.softwarfare.com/identity-as-the-control-plane) - [The Shift to Adaptive Persistent Threats: Why Identity is the New Battlefield](https://blog.softwarfare.com/the-shift-to-adaptive-persistent-threats-why-identity-is-the-new-battlefield) - [The Autonomous Insider: Why Your AI Agents Need Zero Trust Authentication](https://blog.softwarfare.com/ai-agents-need-zero-trust-authentication) [![SOFTwarfare Logo Web White](https://blog.softwarfare.com/hs-fs/hubfs/SOFTwarfare%20Logo%20Web%20White%20NoR.png?width=140&height=45&name=SOFTwarfare%20Logo%20Web%20White%20NoR.png "SOFTwarfare Logo Web White")](https://www.softwarfare.com) [**Platform**](https://www.softwarfare.com/zero-trust-identity) Use Cases [Passwordless Authentication](https://www.softwarfare.com/passwordless-authentication) [Desktop Login](https://www.softwarfare.com/desktop-login) [Single Sign On (SSO)](https://www.softwarfare.com/single-sign-on--sso) [Privileged Access](https://www.softwarfare.com/privileged-access) [Secured Integration](https://www.softwarfare.com/secured-integration) **Enterprise** [Verticals](https://www.softwarfare.com/verticals) [**Resources**](https://www.softwarfare.com/resources) [Defense](https://www.softwarfare.com/defense) Company [About Us](https://www.softwarfare.com/about-us) [Blog](https://blog.softwarfare.com/) [Partners](https://www.softwarfare.com/partners) [See a Demo](https://www.softwarfare.com/demo) ©2025 SOFTwarfare. All rights reserved. [Privacy](https://www.softwarfare.com/privacy-policy)[& Terms](https://www.softwarfare.com/privacy-policy) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "SOFTwarfare Staff", "url" : "https://blog.softwarfare.com/author/softwarfare-staff" }, "dateModified" : "2024-05-06T20:48:04.187Z", "datePublished" : "2024-02-18T17:55:13.000Z", "headline" : "Strategies for Securing Remote Access for Critical Infrastructure", "image" : [ "https://blog.softwarfare.com/hubfs/Blog%20Images/Aerial%20View%20of%20The%20Solid%20Contact%20Clarifier%20Tank%20Type%20Sludge%20Recirculation%20in%20Water%20Treatment%20Plant_262x175.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.softwarfare.com/strategies-for-securing-remote-access-for-critical-infrastructure", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.softwarfare.com/hubfs/SOFTwarfare%20Logo%20Black%20Hi-res.webp" } } } ```