A control-plane system manages or coordinates other devices and services. It handles administrative functions such as configuration, access control, and directing network or service behavior, rather than carrying ordinary user traffic itself. Examples include device-management platforms and network controllers.
Because control planes have privileged reach, attackers who compromise them may be able to change settings, access connected systems, or use managed infrastructure as part of an intrusion. Defenders should restrict management interfaces to trusted networks, enforce strong authentication, patch control-plane components, and monitor administrative actions and unusual access. A control-plane system appearing in an attack path does not, by itself, establish what systems were affected.