Software in the Supply Chain: The Newest Insider Threat to ICS Networks

This whitepaper examines the spectrum of insider threats to ICS/OT environments — from malicious or negligent employees to software and supply-chain vendors acting as de facto 'insiders' — and discusses how digital transformation, work-from-home practices, and data leaks increase risk. It references high-profile examples (SolarWinds, Snowden, Vault7), highlights the unique impact and detection challenges for ICS, and outlines the application of CTI models (e.g., the Diamond Model) and mitigation recommendations for reducing insider and supply-chain espionage risk.