Connected Equipment, Cyber Risk And Business Continuity

The Equipment Is Part Of The Business

The supermarket refrigeration incidents reported in November 2026 are a practical reminder that a cyber incident can affect the physical conditions a business relies on. Temperature control, building management and production equipment deserve attention alongside business applications.

I would start by identifying equipment whose failure or manipulation could cause material harm. That may mean lost stock, interrupted production, an unusable building or a safety concern. The commercial consequence should determine the attention it receives.

An asset register helps, provided it explains enough to support a decision. For critical equipment, the business needs to know its purpose, owner, supplier, connectivity, support status and dependencies. A model number without that context is mainly useful to somebody ordering a replacement.

Close The Gap Between Technology And Operations

Connected equipment can sit between several teams. Operations relies on it, a specialist contractor maintains it, procurement manages the agreement and IT provides some of the connectivity. Each may reasonably believe another party is dealing with security.

I would make those responsibilities explicit. Name the business owner and establish who approves access, maintains the equipment, monitors changes and responds to an incident. Include the supplier in that discussion, particularly where specialist knowledge is essential.

The aim is to give people a workable arrangement with clear decisions and escalation routes. Adding everybody to an email distribution list is unlikely to achieve quite the same result.

Treat Remote Access As An Operational Decision

Remote support can reduce downtime and avoid unnecessary site visits. Its value should be preserved through appropriate controls.

For critical equipment, I would expect the organisation to establish why remote access is needed, which people can use it and how their access is authenticated, restricted and recorded. Supplier access should be removable when a contract ends or circumstances change.

Equipment should not be directly exposed to the internet simply because that was the quickest way to make maintenance convenient. Appropriate separation from other systems also needs consideration, with the design agreed by people who understand both security and safe operation.

A standard that works for an office laptop may need adapting carefully for equipment that cannot be interrupted during production. That calls for engineering judgement and a managed process.

Make Support Status An Investment Decision

Unsupported equipment can continue performing its original function while becoming increasingly difficult to protect. Replacement decisions therefore need to consider more than whether the unit still switches on.

I would expect a lifecycle plan for critical connected equipment, including support dates, available updates, replacement options and the operational consequences of failure. Where replacement must wait, record the exposure, agree interim safeguards and give the decision an owner and review date.

Updates should follow an appropriate testing and maintenance process. Applying a change without understanding its operational effect can create a different problem. Equally, leaving a known weakness unresolved indefinitely should require an explicit business decision.

Check That Monitoring Can Be Trusted

An equipment incident may involve incorrect settings or misleading readings while the system appears available. Recovery planning needs to account for that possibility.

For high-consequence processes, I would establish how staff detect an abnormal condition and whether important measurements have an appropriate independent check. Consider how alarms are escalated, who is available to respond and what happens if the normal monitoring service is unavailable or unreliable.

The response should include safe isolation and recovery procedures agreed with qualified operators and suppliers. Staff need clear instructions about when to stop, escalate or invoke an alternative process.

Give Leadership A Short, Useful View

A board or executive team needs a view of the material exposure and the decisions required. I would report critical equipment with unresolved access risks, unsupported assets, overdue maintenance and significant supplier dependencies, together with an owner and funded action where necessary.

Exercises should test those arrangements with the people who would use them. Include an unavailable supplier, an unexpected settings change or a monitoring failure, then establish whether the response protects the operation.

The value comes from finding and closing weaknesses before an incident forces the discussion. A refrigeration controller may never feature prominently in the technology strategy, but the business still needs somebody to know who can change its settings.

Source: Reuters reporting, 2 November 2026.

Related: From Cyber Resilience To Operational Resilience: Why Boards Need To Think Beyond Security