The FBI and CISA published a fact sheet on September 23, 2026, on the access third-party integrators hold to industrial control systems. It asks operators to apply least privilege, list authorized integrator staff in contracts and keep remote access off, where possible, until they allow it.