Operational lock-in is the growing dependence on a single vendor, platform, or managed service for core business functions. At first, the arrangement can feel efficient: one terminal, one dashboard, one support channel. Over time, though, data formats, workflows, device management, and staff habits may become tied to that provider, making migration expensive or technically difficult.
In cyber security, operational lock-in matters because it narrows choice and concentrates risk. If one platform controls payments, logs, updates, and user access, a compromise or outage can affect the entire operation. Attackers may target this dependency through vendor accounts, supply-chain abuse, or malicious updates. Defenders look for ways to reduce lock-in by keeping exports usable, separating privileges, documenting configuration, and ensuring that authentication, logging, and recovery do not depend on a single system. In practice, resilience means being able to switch, isolate, or replace a service without losing control of the business.